[tex-live] tlmgr: permissions on /tmp/texlive.tlpdb.lzma

cfrees at imapmail.org cfrees at imapmail.org
Fri Sep 12 22:23:29 CEST 2008


On Fri 12th Sep, 2008 at 23:30, Vladimir Volovich seems to have written:

> "VI" == Victor Ivrii writes:
>
> VI> This happens when you run %tlmgr ...  after %sudo tlmgr
>
> VI> obviously you as you do not have the same privileges as a root
>
> tlmgr should not create predictable file names (such as /tmp/texlive.tlpdb.lzma)
> in public locations, this is a security hole.
>

Both /tmp/texlive.tlpdb.lzma and /tmp/texlive.tlpdb are problematic,
then?

- cfr


> Best,
> v.
>


More information about the tex-live mailing list