zsh/env: use safe setting for TMPPREFIX

[config/dotfiles.git] / zsh / env

diff --git a/zsh/env b/zsh/env
index be6c5283bec63ebcb311ab8029d86759ad35491f..30483a0178dea80120bc2c6c6ee1a9dcfdf4d8dc 100644 (file)
--- a/zsh/env
+++ b/zsh/env
@@ -1,9 +1,22 @@
 # Zsh configuration file for environment related options.
 
+# Copyright (C) 2011-2014  Simon Ruderich
+#
+# This file is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This file is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this file.  If not, see <http://www.gnu.org/licenses/>.
 
-. ~/.shell/functions
 
-source_debug ". ~/.zsh/env"
+. ~/.shell/functions
 
 source_config ~/.shell/env
 
@@ -11,9 +24,12 @@ source_config ~/.shell/env
 # Make sure elements in PATH are unique.
 typeset -U path PATH
 
+# Use $TMPDIR/zsh as directory for temporary Zsh files to prevent symlink
+# attacks - only helps if $TMPDIR points to a safe directory (which should be
+# true with the settings in shell/env).
+TMPPREFIX="$TMPDIR/zsh"
 
-source_config ~/.zsh/env.local
 
-source_debug ". ~/.zsh/env (done)"
+source_config ~/.zsh/env.local
 
 # vim: ft=zsh