diff options
| author | Nataliia Solomko <natalirs1985@gmail.com> | 2026-11-06 17:46:22 +0200 |
|---|---|---|
| committer | Nataliia Solomko <natalirs1985@gmail.com> | 2026-11-06 18:08:47 +0200 |
| commit | 5068f3f95cf1117cfe8b2d8df377f9a8b045cb61 (patch) | |
| tree | 38a98b1417c62dc5e474f23d4cdae1ccf651f1f1 /src/migration-scripts/https/0-to-1 | |
| parent | c67221dfa4eac5e2f78eea09028a078a9c63cde6 (diff) | |
| download | vyos-1x-5068f3f95cf1117cfe8b2d8df377f9a8b045cb61.tar.gz vyos-1x-5068f3f95cf1117cfe8b2d8df377f9a8b045cb61.zip | |
http-api: T9588: Keep config strings out of world-readable /tmp
The /config-file endpoint wrote config strings to /tmp/config.file,
readable by any local user and never removed. A file pre-created at
that path by another user made every later request fail.
The string now goes to a private temp file that is always removed.
The load and merge helpers, and the vyconf session, also remove their
own /tmp copy when loading raises, e.g. on a syntax error.
Diffstat (limited to 'src/migration-scripts/https/0-to-1')
0 files changed, 0 insertions, 0 deletions