Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Security issue and temp files
Top Forums UNIX for Dummies Questions & Answers Security issue and temp files Post 302358222 by robsonde on Thursday 1st of October 2009 05:42:26 PM
Old 10-01-2009
Quote:
Originally Posted by mojoman
1) What does the $$ do?
2) Was the senior administrator write about his example concerning symbolic links? Like I said, when I tried it did not work (symbolic link will not overwrite /etc/passwd since it is already there) I was using a test system so no worries...had it overwritten /etc/passwd I would not be in trouble (smile).
1. the $$ is the PID number.
so /tmp/program.$$ becomes /tmp/program.10263 or maybe /tmp/program.542

2. the symbolic link will only let you over write the passwd file if your program is running as root.
is it a risk? yes, but soon as you start writing shell script that run as root you open yourself up to many possable security holes.

his use of mktemp is the right way of doing it, I would recomend you change your script to use it if you can.
if nothing else you will get on his good side :-)
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Tidying up temp files on exit of script

Hi I believe there is a method to remove all temporary files when a KSH script terminates (either expectedly or unexpectedly). I think is some sort of subroutine you can create that runs when the script exits. Can anyone help me with this please? Many thanks Helen :confused: (2 Replies)
Discussion started by: Bab00shka
2 Replies

2. Shell Programming and Scripting

Script to Delete temp files and check file system

Hi all, new to the threads as well as Unix/Linux. I need to create a script that will delete any temporary files as well as check the files on the system for errors or corruption. This is what I have so far and I'm sure that I'm missing things or have the wrong commands. I'm not sure where to go... (3 Replies)
Discussion started by: Bwood1377
3 Replies

3. Shell Programming and Scripting

Joining 3 AWK scripts to avoid use "temp" files

Hi everyone, Looking for a suggestion to improve the below script in which I´ve been working. The thing is I have 3 separated AWK scripts that I need to apply over the inputfile, and for scripts (2) and (3) I have to use a "temp" file as their inputfile (inputfile_temp and inputfile_temp1... (2 Replies)
Discussion started by: cgkmal
2 Replies

4. UNIX for Dummies Questions & Answers

Temp mysql files jamming CPU resources

Hello Friends I am currently facing high CPU usage problem which is making my site extremely slow. Currently I am using a 8GB RAM with 8 cores but, the creation of temporary files is eating away a lot of the CPU resource making the site very slow. The normal CPU load average remains below 2-3... (5 Replies)
Discussion started by: egully
5 Replies

5. Shell Programming and Scripting

temp files

Hi there, As a regular unix user I am forever programming on the command line or writing scripts so that I first write a load of data to a file to read from. In the end I am always left with a bundle of .txt, .tmp which is what I usually call them. As a basic programmmer I was wondering is... (6 Replies)
Discussion started by: cyberfrog
6 Replies

6. Shell Programming and Scripting

Script to temp create files more than inode limit

HI, I am from testing background. I have a scenario of a file generation, through cronjob, on a defined path. After I fill the data as 100 % utilized, my application is generating an empty file on the defined path. # df -kh Filesystem Size Used Avail Use% Mounted on... (3 Replies)
Discussion started by: atulbassi83
3 Replies

7. OS X (Apple)

Safari Temp Internet Files Location

I'm looking for help with finding where plugin data and other page resources are stored on the hard disk in safari 6.0. With the new update, the activity window has been merged into the develop menu under "show page resources" and one cannot access them directly. I tried running opensnoop to see... (3 Replies)
Discussion started by: sakurashinken
3 Replies

8. Shell Programming and Scripting

Backup shell script created temp files .

Hi, I've a script which creates a temp flat file for storing all business dates received on a single day from diff control files sent by source system on that day. e.g on 12th april I receive txns for business day 8,9,10,11 april. I capture this business day and append to a flat file from... (1 Reply)
Discussion started by: manojg9
1 Replies

9. Shell Programming and Scripting

RMTF (ReMove Temp Files)

Heyas As some applications (sed,grep,vi, etc) create some tempfiles, i'd changed a script to this: (sadly i cant find the original post (code) anymore (which just removed 2 'diffrent kinds'), just similar ones - forgot that as i was new to all this) :) ~ $ cat $(which rmtf) #!/bin/sh #... (1 Reply)
Discussion started by: sea
1 Replies

10. Shell Programming and Scripting

Removing large number of temp files

Hi All, I am having a situation now to delete a huge number of temp files created during run times approx. 16700+ files. We have never imagined that we will get this this much big list of files during run time. It worked fine for lesser no of files in the list. But when list is huge we are... (7 Replies)
Discussion started by: mad man
7 Replies

LEARN ABOUT DEBIAN

cvsd-buildroot

cvsd-buildroot(8)					      System Manager's Manual						 cvsd-buildroot(8)

NAME

       cvsd-buildroot - create a chrooted directory structure for use in cvsd.

SYNOPSIS

       cvsd-buildroot DIRECTORY

DESCRIPTION

       cvsd-buildroot creates and populates a directory that can be used as a chroot jail for running cvsd (see cvsd(8) ) in.

       This script should be run as the root user since the creation of devices and the changing of ownership and permissions require this.

       The script gives warnings about files that it's not expecting.

       cvsd-buildroot creates the following directory structure:

       /bin   This directory is populated with the cvs binary that is found on the system.

       /lib   This  directory  is  populated  with  all the libraries that are required for running programs in the /bin directory as well as some
	      predefined required libraries that are present on the system.

       /dev   Here null and zero devices are created.

       /etc   In this directory a passwd file is created that is used for matching user id's with usernames. The root and cvsd user are  added	to
	      this  file  if  they're  not there yet.  The passwd file is checked for consistency with the system /etc/passwd to prevent mistakes.
	      The passwd file is also populated with users referenced in the repository directories.  Note that no password data from  /etc/passwd
	      or any other file is stored in the generated passwd file, all password entries are set to 'x'.

       /usr   Here  symbolic  links  are placed to /bin and /lib for some common library and binary directories found on the system.  This is done
	      for systems that have hard-coded paths for libraries.

       /libexec and /usr/libexec
	      Symbolic links for these directories are created if they are present on the system.

       /tmp   This directory is cleaned out on systems that have tmpreaper.

       After the directories are created and populated ownership and rights are set to a reasonable value (root:root,umask=022).

OPTIONS

       cvsd-buildroot takes one argument, namely a directory in which the chroot jail will be created. The directory should be specified  with	an
       absolute path.

NOTES

       Creating  a  chroot environment is a terribly non-portable thing to do and therefore you may experience problems with missing libraries and
       system files.  For more information see the FAQ and the README.	If you have to	install  libraries  or	perform  actions  not  covered	by
       cvsd-buildroot please report your findings to <cvsd-users@lists.arthurdejong.org>.

       Rerunning  cvsd-buildroot  after  you have created your repository is advised since the repositories are checked for references to userid's
       and lockfile directories.

SEE ALSO

       cvsd(8)
       README
       FAQ

AUTHOR

       Arthur de Jong <arthur@arthurdejong.org>.

Version 1.0.24							     Jun 2012							 cvsd-buildroot(8)
All times are GMT -4. The time now is 12:13 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy