Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 2825 - RuntimeWarning: tmpnam is a potential security risk
Summary: RuntimeWarning: tmpnam is a potential security risk
Status: RESOLVED WONTFIX
Alias: None
Product: Portage Development
Classification: Unclassified
Component: Unclassified (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Thomas Raschbacher
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-05-18 10:10 UTC by Jean Jordaan
Modified: 2011-10-30 22:19 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
pkg-clean (pkg-clean,2.64 KB, text/plain)
2002-12-11 18:12 UTC, Thomas Raschbacher
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Jean Jordaan 2002-05-18 10:10:29 UTC
I just noticed this:

root@blommie portage # pkg-clean --help
/usr/sbin/pkg-clean:43: 
RuntimeWarning: tmpnam is a potential security risk to your program
  tmpname = 
os.tmpnam()

From "What's New in Python 2.2a2?" (Release Date: 22-Aug-2001):

 - Calling 
os.tempnam() or os.tmpnam() generate RuntimeWarnings.
Comment 1 Karl Trygve Kalleberg (RETIRED) gentoo-dev 2002-05-23 12:40:53 UTC
pkg-clean does not seem to be maintained actively anymore, and it will most 
likely be removed with the next version of gentoolkit.
Comment 2 SpanKY gentoo-dev 2002-08-05 21:44:10 UTC
*** Bug 5922 has been marked as a duplicate of this bug. ***
Comment 3 SpanKY gentoo-dev 2002-08-05 21:44:42 UTC
hrm, attachment id != bug id, my bad
Comment 4 Karl Trygve Kalleberg (RETIRED) gentoo-dev 2002-11-02 15:11:01 UTC
This is a trivial one. Just attach your new pkg-clean script to this bug an
reassign it to me once you're done, and I'll stuff it into Gentoolkit again.
Comment 5 Thomas Raschbacher gentoo-dev 2002-12-11 18:12:36 UTC
Created attachment 6415 [details]
pkg-clean

here it is plz test it too ;)

btw it wasn't really a bug imho.. 

greetings
Comment 6 Thomas Raschbacher gentoo-dev 2002-12-11 18:13:14 UTC
finally got time to have a look at this ;)
Comment 7 Karl Trygve Kalleberg (RETIRED) gentoo-dev 2003-05-03 08:40:22 UTC
Then do it ;P
Comment 8 Thomas Raschbacher gentoo-dev 2003-06-13 02:52:07 UTC
what exactly do ya expect me to do here? commit?
Comment 9 Thomas Raschbacher gentoo-dev 2003-06-21 23:44:31 UTC
hellow karl?
Comment 10 Rob Davies 2003-09-09 13:13:16 UTC
Anything happening with this, or is it forgotten? 
Comment 11 solar (RETIRED) gentoo-dev 2003-10-01 10:54:15 UTC
It seems to have been forgotten or overlooked.
however warnings about tmpnam() are pretty common. 
mkstemp() is slightly a better replacment and should be used when ever possible.
Comment 12 Thomas Raschbacher gentoo-dev 2003-10-01 23:53:27 UTC
didn't forget it but waited4feedback of karltk ...
Comment 13 Thomas Raschbacher gentoo-dev 2004-05-12 08:14:47 UTC
depr. with gentoolkit 0.2.0 ..

closing the bug