From: Tanaka Akira <akr@...17n.org>
Date: 2005-05-13T16:52:44+09:00
Subject: Re: ruby-dev summary 26090-26127

In article <Pine.LNX.4.62.0505121149220.9643@harp.ngdc.noaa.gov>,
  Ara.T.Howard@noaa.gov writes:

> maybe i was unclear - i meant:
>
>    mkdir dir_to_be_removed.tmp
>
>    chmod 0700 dir_to_be_removed.tmp
>
>    mv dir_to_be_removed dir_to_be_removed.tmp  # avoid race condition, ignore
>                                                # errors here
>
>    rm -rf dir_to_be_removed.tmp/dir_to_be_removed
>
>    rm -rf dir_to_be_removed.tmp/
>
>
> - no race, even on nfs

I'm not sure about NFS issue.

> - no security issue since all chmod'ing done during removal will happen
>    under a restricted directory

A malicious user may have a process which current working directory is
a directory in the restricted directory.

Is the restriction enough to be secure?
-- 
Tanaka Akira