Menu

#10 avoid tampering with TMPDIR

Next_Release
closed
None
5
2025-01-11
2020-04-18
No

Please consider changing TMDIR to something like TEMPDIR as overriding this particular variable can be both a security risk in a scenario when Bob desperately wants to mess up Alice's ipmiutil build with TMPDIR set to /tmp, and in my case a compiler (lcc 1.23/1.24, not gcc but rather similar to icc in general) gets confused over its own temporary files being missing in that prefix.
The problem is present in the current 3.1.6 release as well.
Quick workaround: sed -i 's,TMPDIR,TEMDIR,g' Makefile*
Thank you for the tool!

Discussion

  • Andy Cress

    Andy Cress - 2024-12-14

    Sorry for the delay in responding. I remember doing an update for this ticket, and I believe that the change was included in 3.1.7 and beyond, but it isn't enumerated in the Changelog.

     
  • Andy Cress

    Andy Cress - 2024-12-14
    • status: open --> pending
    • assigned_to: Andy Cress
     
  • Michael Shigorin

    I've just checked 3.2.0 build without this kludge and it's still failing the same way:

    lcc: error: cannot open file '/tmp/iu/ipmiutil-3.1.9/lcc_xkFr8c.s' (No such
              file or directory)
    

    Indeed:

    $ zcat ipmiutil-3.2.0.tar.gz| grep -c TMPDIR
    81
    

    Please consider the workaround (sans the typo): s/TMPDIR/TEMPDIR/g; thank you!

     
  • Andy Cress

    Andy Cress - 2025-01-09

    I have applied an update that should resolve this in ipmiutil-3.2.1 (does not set TMPDIR), but would like you to confirm it before pushing this out. Here is the updated tarball - https://ipmiutil.sourceforge.net/FILES/ipmiutil-3.2.1.tar.gz

     
  • Michael Shigorin

    ACK; there's #11 though, sorry to come back with that!

     
  • Andy Cress

    Andy Cress - 2025-01-11
    • status: pending --> closed
     
  • Andy Cress

    Andy Cress - 2025-01-11

    Now included in ipmiutil-3.2.1

     

Log in to post a comment.