PSPP-BUG: [bug #15723] HTML driver creates .png files insecurely

[John Darrington]

Follow-up Comment #1, bug #15723 (project pspp):

Further information from Joseph Saint Pierre:

  When PSPP is used with device html with "pspp -o html" there is a
file created with the following path: /var/tmp/pspp0.png and the owner
of this file is the user who has sent the command. If this file is
not deleted no one but root cannot use the command "pspp -o html".

     Maybe no one else a used PSPP with a multi users environment... I
think this could be simply changed, but unfortunately I dont not how.
I think the created could be located in a directory specific to the
user for example : /var/tmp/$user/pspp0.png to avoid conflict between users.
Another solution could be giving an orignal name based on time or
process number.


    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?func=detailitem&item_id=15723>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/