https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90195

--- Comment #2 from pat at rack911labs dot com ---
(In reply to Andrew Pinski from comment #1)
> Use a TMPDIR env if you want to prevent other users from getting access to
> files.
> 
> This is a minor security hole really because it allows a person with already
> have access to do bad things.  If you trust an user to have an user account
> then you have to trust enough not do bad things.

Unless of course you run a shared hosting environment, etc.

While I agree it is a pretty minor issue, it is still a security vulnerability
that should be addressed outside of expecting developers to set a TMPDIR env.

Reply via email to