Re: README: three important security proposals

>That's a nice summary.

Thanks.

>Now if someone will be so kind as to add the necessary code to IO.xs,
>I'd be glad to put it in.

I suggest using the openbsd code, with 2 additions:

    1) There's a race condition in mkstemp(3) that can 
       be solved by checking for nlink==0 after the unlink.

    2) Calling a mktemp-ish function in a nonsecure directory
       (one that allows other than the owner to delete from it,
	so other-group write but not sticky) should be a 
	warning or an exception.  Actually, under tainting,
	it should definitely be an exception.

--tom

• Re: README: three important security proposals by Tom Christiansen
• README: three important security proposals by Tom Christiansen
• Re: README: three important security proposals by Gurusamy Sarathy