Bug#373786: /etc/cron.daily/exim4-base should unset TMPDIR

[Tollef Fog Heen]

* Marc Haber 

| A workaround possible for Debian-exim could be
| mkdir $TMPDIR/Debian-exim
| chown Debian-exim $TMPDIR/Debian-exim
| TMPDIR=$TMPDIR/Debian-exim start-stop-daemon --chuid Debian-exim some_job
| which might also expose a file system which should only be writeable
| for root for a non-root user.
| 
| Piotr, would this be an acceptable workaround for you?
| 
| libpam-tmpdir maintainer, is this an acceptable workaround from a
| libpam-tmpdir point of view?

Apart from the fact that you won't be able to access
/tmp/user/0/Debian-exim due to /tmp/user/0 being mode 0700, it'll
work.

So no, this won't really work; if you do that, you either need to
check if $TMPDIR/Debian-exim is accessible to Debian-exim or you need
to make sure it is. 

| dpkg-maintainer, is it possible to have start-stop-daemon do a pam
| call in case of --chuid so that TMPDIR is set correctly?

This would be the best solution, IMO.

-- 
Tollef Fog Heen                                                        ,''`.
UNIX is user friendly, it's just picky about who its friends are      : :' :
                                                                      `. `' 
                                                                        `-