On Jan 19, 2014, at 9:30 AM, David Levine <levinedl@acm.org> wrote:
* All nmh programs will put tmp files in the first non-null location
of {MHTMPDIR, TMPDIR, TMP, MH Path directory}.
This should be $MHTMPDIR, $TMPDIR, "/tmp". (I was wrong earlier about mkstemp() defaulting to /tmp – you have to specify the full path.) I guess $TMP is a Windows thing? It shouldn't be used on UNIX systems.
* If MHTMPDIR is not an absolute path, interpret it as relative to the MH Path directory.
This is a security breach waiting to happen. For tempfiles you should always be specifying an absolute path. This isn't just an MH issue. --lyndon
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Nmh-workers mailing list Nmh-workers@nongnu.org https://lists.nongnu.org/mailman/listinfo/nmh-workers