[tex-live] tlmgr: permissions on /tmp/texlive.tlpdb.lzma

cfrees at imapmail.org cfrees at imapmail.org
Fri Sep 12 22:23:29 CEST 2008

On Fri 12th Sep, 2008 at 23:30, Vladimir Volovich seems to have written:

> "VI" == Victor Ivrii writes:
> VI> This happens when you run %tlmgr ...  after %sudo tlmgr
> VI> obviously you as you do not have the same privileges as a root
> tlmgr should not create predictable file names (such as /tmp/texlive.tlpdb.lzma)
> in public locations, this is a security hole.

Both /tmp/texlive.tlpdb.lzma and /tmp/texlive.tlpdb are problematic,

- cfr

> Best,
> v.

More information about the tex-live mailing list