alpinelinux / alpine-chroot-install

Install Alpine Linux in chroot with a breeze. Build ARM on Travis CI or any other x86_64 CI.
MIT License
290 stars 59 forks source link

Insecure use of /tmp #9

Closed jwilk closed 6 years ago

jwilk commented 6 years ago

This program uses /tmp/alpine as a temporary directory, even when this directory already exists and is owned by another user. Malicious local users could exploit this bug to execute arbitrary code as root. Please use mktemp -d for creating temporary directories securely.