Bug 2825 – RuntimeWarning: tmpnam is a potential security risk

• Product: Portage Development
• Status: RESOLVED WONTFIX

[Description Jean Jordaan 2002-05-18 10:10:29 UTC]

I just noticed this:

root@blommie portage # pkg-clean --help
/usr/sbin/pkg-clean:43: 
RuntimeWarning: tmpnam is a potential security risk to your program
  tmpname = 
os.tmpnam()

From "What's New in Python 2.2a2?" (Release Date: 22-Aug-2001):

 - Calling 
os.tempnam() or os.tmpnam() generate RuntimeWarnings.

[Comment 1 Karl Trygve Kalleberg (RETIRED) 2002-05-23 12:40:53 UTC]

pkg-clean does not seem to be maintained actively anymore, and it will most 
likely be removed with the next version of gentoolkit.

[Comment 2 SpanKY 2002-08-05 21:44:10 UTC]

*** Bug 5922 has been marked as a duplicate of this bug. ***

[Comment 3 SpanKY 2002-08-05 21:44:42 UTC]

hrm, attachment id != bug id, my bad

[Comment 4 Karl Trygve Kalleberg (RETIRED) 2002-11-02 15:11:01 UTC]

This is a trivial one. Just attach your new pkg-clean script to this bug an
reassign it to me once you're done, and I'll stuff it into Gentoolkit again.

[Comment 5 Thomas Raschbacher 2002-12-11 18:12:36 UTC]

Created attachment 6415 [details]
pkg-clean

here it is plz test it too ;)

btw it wasn't really a bug imho.. 

greetings

[Comment 6 Thomas Raschbacher 2002-12-11 18:13:14 UTC]

finally got time to have a look at this ;)

[Comment 7 Karl Trygve Kalleberg (RETIRED) 2003-05-03 08:40:22 UTC]

Then do it ;P

[Comment 8 Thomas Raschbacher 2003-06-13 02:52:07 UTC]

what exactly do ya expect me to do here? commit?

[Comment 9 Thomas Raschbacher 2003-06-21 23:44:31 UTC]

hellow karl?

[Comment 10 Rob Davies 2003-09-09 13:13:16 UTC]

Anything happening with this, or is it forgotten? 

[Comment 11 solar (RETIRED) 2003-10-01 10:54:15 UTC]

It seems to have been forgotten or overlooked.
however warnings about tmpnam() are pretty common. 
mkstemp() is slightly a better replacment and should be used when ever possible.

[Comment 12 Thomas Raschbacher 2003-10-01 23:53:27 UTC]

didn't forget it but waited4feedback of karltk ...

[Comment 13 Thomas Raschbacher 2004-05-12 08:14:47 UTC]

depr. with gentoolkit 0.2.0 ..

closing the bug