[Pkg-systemd-maintainers] Processed: reassign 720851 to systemd
Michael Stapelberg
stapelberg at debian.org
Mon Aug 26 22:54:32 BST 2013
Hi Bastian,
Debian Bug Tracking System <owner at bugs.debian.org> writes:
> Bug #720851 [lvm2] systemd - Generators uses predictable file names in /tmp
I appreciate your attention to detail, but I think there is no actual
bug worth fixing here:
Generators are invoked by systemd and argv[1] is always provided,
i.e. they will never actually write files to /tmp. And even if you call
the generator manually, nobody will ever read the file from
/tmp. Therefore, there is no attack vector here.
In case you disagree, please file a bug upstream at lvm — after all,
they ship the generator in question.
--
Best regards,
Michael
More information about the Pkg-systemd-maintainers
mailing list