Tails Installer logging location is unsafe
The way I understand the code, we’re logging to
/tmp/liveusb-creator.log. That’s a well-known name in a world-writable
location, so leaves room for some kinds of attacks e.g. arbitrary file
modification. We should fix that before we upload this piece of software
to Debian.
Feature Branch: liveusb-creator:bugfix/9349-safer-error-logging
Parent Task: #8549 (closed)
Related issues
- Blocks #8557 (closed)
Original created by @intrigeri on 9349 (Redmine)