[Pkg-systemd-maintainers] Processed: reassign 720851 to systemd

Michael Stapelberg stapelberg at debian.org
Mon Aug 26 22:54:32 BST 2013


Hi Bastian,

Debian Bug Tracking System <owner at bugs.debian.org> writes:
> Bug #720851 [lvm2] systemd - Generators uses predictable file names in /tmp
I appreciate your attention to detail, but I think there is no actual
bug worth fixing here:

Generators are invoked by systemd and argv[1] is always provided,
i.e. they will never actually write files to /tmp. And even if you call
the generator manually, nobody will ever read the file from
/tmp. Therefore, there is no attack vector here.

In case you disagree, please file a bug upstream at lvm — after all,
they ship the generator in question.

-- 
Best regards,
Michael




More information about the Pkg-systemd-maintainers mailing list