konold at kde.org
Mon Dec 24 03:09:32 PST 2012
Am Montag, 24. Dezember 2012, 10:36:10 schrieb David Faure:
> > > if XDG_RUNTIME_DIR isn't set, mkdir /tmp/runtime-$USER,
> > > then ensure that it's owned by the user (otherwise bail out),
> > > then chmod to 0700 (and if that fails, bail out).
> > Well, this is a DoS. You cannot use a guessable name in /tmp.
> I see no other solution, as long as some distros don't set XDG_RUNTIME_DIR.
> XDG_RUNTIME_DIR (e.g. filling up your /run/user/$USERNAME), preventing
> other users from creating files under their own /run/user/$OTHERNAME. Is
> there a way to solve this?
> Finally, a last issue that came up about XDG_RUNTIME_DIR (when talking to
> Debian people), was that it's not per-X-session ($DISPLAY), so logging in
> more than once will break.
IMHO this is a relevant issue.
> A solution is for each application using
> XDG_RUNTIME_DIR to create a subdir named after the DISPLAY, but it would
> have been nice if this was handled by the OS automatically.
What about a parent directory containing the DISPLAY? It would prevent of
making /tmp and similar a mess.
More information about the xdg