GNOME Bugzilla – Bug 137784
Temp file warnings for usernames with hyphens
Last modified: 2006-10-22 14:06:45 UTC
Given two users: spk and spk-p orbit tries to open the other's temp dir resulting in the warning: ** (eog:9037): WARNING **: Owner of /tmp/orbit-spk-p is not the current user This seems to be caused by the way temp dirs are constructed: $TEMP_DIR/otbit-$USER-$RANDOM I noticed this first when constructing an LFS system following the BLFS CVS guide using ORBit2 2.8.3. This was also observed on RedHat 9.0 using ORBit2 2.6.0-2. Doesn't create any observable problems (except scrolling lots of warnings to the console) so I set this as minor. However, possible security risk??
Further comment and a proposed solution is discussed at http://bugzilla.gnome.org/show_bug.cgi?id=152659, which addresses a more general case.
Marking as duplicate. *** This bug has been marked as a duplicate of 152659 ***