Re: [Texmacs-dev] Re: [Bug #1789] temporary files are created in an insecure way

[Nix N. Nix]

[...]
> /var/cache
> ==========
> 
> /var/cache is intended for cached data from applications. Such data is
> locally generated as a result of time-consuming I/O or calculation. The
> application must be able to regenerate or restore the data. Unlike
> /var/spool, the cached files can be deleted without data loss. The data
> should remain valid between invocations of the application and rebooting
> the system.
> 
> Files located under /var/cache may be expired in an application specific
> manner, by the system administrator, or both. The application should
> always be able to recover from manual deletion of these files (generally
> because of a disk space shortage). No other requirements are made on the
> data format of the cache directories. 

True.  However, in RedHat at least, /var/cache is owned by root.root and
is 0755, so no regular user may write to it.  Notice that the spec says
nothing about privileged vs. unprivileged applications.

> 
> 
> -Ralf.