zsh/env: use safe setting for TMPPREFIX

diff --git a/zsh/env b/zsh/env
index e5554e3dca3af1de5b5ae8ddd38d5bb959ea154b..30483a0178dea80120bc2c6c6ee1a9dcfdf4d8dc 100644 (file)
--- a/zsh/env
+++ b/zsh/env
@@ -24,6 +24,11 @@ source_config ~/.shell/env
 # Make sure elements in PATH are unique.
 typeset -U path PATH
 
+# Use $TMPDIR/zsh as directory for temporary Zsh files to prevent symlink
+# attacks - only helps if $TMPDIR points to a safe directory (which should be
+# true with the settings in shell/env).
+TMPPREFIX="$TMPDIR/zsh"
+
 
 source_config ~/.zsh/env.local