SECURITY fix for dtappintegrate: Use mktemp(1) to generate a template.

Using a fixed filename in /tmp is just begging for a symlink attack ...

diff --git a/cde/programs/dtappintegrate/dtappintegrate.src b/cde/programs/dtappintegrate/dtappintegrate.src
index 6a4f8ab63f42f32359a0bd05a6576906be534995..3006a87d7687eca777c43c2e53b4b867e72d0044 100755 (executable)
--- a/cde/programs/dtappintegrate/dtappintegrate.src
+++ b/cde/programs/dtappintegrate/dtappintegrate.src
@@ -300,7 +300,7 @@ FRONTPANEL_FILES=*.fp
 APPMAN_FILES="(*)"
 
 ID=$(id)
-LOGFILE=/tmp/dtappint.log
+LOGFILE=$(mktemp /tmp/dtappint.logXXXXXXXXXXXXXXXX)
 PATH=CDE_INSTALLATION_TOP/bin:/usr/bin
 
 XCOMM -------------------------------------------------------------------