Martin Konold konold at kde.org
Mon Dec 24 03:09:32 PST 2012

Am Montag, 24. Dezember 2012, 10:36:10 schrieb David Faure:

> > > if XDG_RUNTIME_DIR isn't set, mkdir /tmp/runtime-$USER,
> > > then ensure that it's owned by the user (otherwise bail out),
> > > then chmod to 0700 (and if that fails, bail out).
> > 
> > Well, this is a DoS. You cannot use a guessable name in /tmp.
> I see no other solution, as long as some distros don't set XDG_RUNTIME_DIR.

> XDG_RUNTIME_DIR (e.g. filling up your /run/user/$USERNAME), preventing
> other users from creating files under their own /run/user/$OTHERNAME. Is
> there a way to solve this?

Filesystem quota?

> Finally, a last issue that came up about XDG_RUNTIME_DIR (when talking to
> Debian people), was that it's not per-X-session ($DISPLAY), so logging in
> more than once will break.

IMHO this is a relevant issue.

> A solution is for each application using
> XDG_RUNTIME_DIR to create a subdir named after the DISPLAY, but it would
> have been nice if this was handled by the OS automatically.

What about a parent directory containing the DISPLAY? It would prevent of 
making /tmp and similar a mess.

-- martin

More information about the xdg mailing list