
27 May
2003
27 May
'03
6:38 a.m.
Martin Sjögren writes:
[...] there is a race between testing whether the name exists and opening the file, every use of mktemp() is a security risk. The race is avoided by mkstemp(3).
That's true (unless you start looking at file systems like NFS, etc.), but if I _need_ to create a temporary directory, it's not like I have an alternative. :-| Peter