[Pkg-privacy-maintainers] Bug#911907: [monkeysphere] Bug#911907: monkeysphere: Patch v3

[Sunil Mohan Adapa]

On Tuesday 30 October 2018 09:19 AM, Daniel Kahn Gillmor wrote:
> On Mon 2018-10-29 12:56:48 -0700, Sunil Mohan Adapa wrote:
>> Attached the patches do this with /usr/bin/env (better to have full
>> path?). I have retested all invocations again.
> 
> thanks!  I've applied your patch on the master branch upstream, and then
> also changed /usr/bin/env to just "env" -- no reason to be brittle about
> where "env" is found on the system.
> 
> We haven't released 0.43 yet, but when we do, this change will be
> incorporated in it.

Sounds good. Thank you for accepting the patch.

[...]
>> I confirm that I no longer see problems with TMPDIR after removing
>> libpam-tmpdir from the system.
> 
> do you think we could just explicitly override TMPDIR as proposed in
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=656750#57 to solve
> that problem on systems where libpam-tmpdir is present?  I'd welcome a
> patch for that too.  Maybe that'd be enough to ship a new upstream
> bugfix release -- or do you have other bugs you want to fix before a
> release?

We have been setting the TMPDIR to
/var/lib/monkeysphere/authentication/tmp/ in FreedomBox for some time
now to work around the problem.  So, I think, in general, this solution
is fine.  However, perhaps we could conservatively use it only in the
very few situations that we actually need to share TMPDIR across two
process owned by different users.

Thanks,

-- 
Sunil

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-privacy-maintainers/attachments/20181030/a4a5857a/attachment.sig>