<br><br><div class="gmail_quote">On Fri, Dec 18, 2009 at 1:58 PM, Marcus Brinkmann <span dir="ltr"><<a href="mailto:marcus.brinkmann@ruhr-uni-bochum.de">marcus.brinkmann@ruhr-uni-bochum.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im">Rob Meijer wrote:<br>
> The process of creating an anonymous file to my knowledge still uses<br>
> linking into a namespace that is vulnerable to race condition attacks.<br>
<br>
</div>It's only vulnerable if used incorrectly ever since O_EXCL was added, see<br>
mkstemp(3).<br></blockquote><div><br>O_EXCL doesn't work on NFS, which is one of the reasons mkstemp(3) exists in the first place.<br></div><br></div><br>-- <br> Dominique Quatravaux<br> +41 79 609 40 72<br><br>