From 90ac33e5d0f93a5199c4cf2eaea4c019ef8da8f4 Mon Sep 17 00:00:00 2001 From: Simon Ruderich Date: Mon, 22 Dec 2014 21:48:53 +0100 Subject: [PATCH] zsh/env: use safe setting for TMPPREFIX --- zsh/env | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/zsh/env b/zsh/env index e5554e3..30483a0 100644 --- a/zsh/env +++ b/zsh/env @@ -24,6 +24,11 @@ source_config ~/.shell/env # Make sure elements in PATH are unique. typeset -U path PATH +# Use $TMPDIR/zsh as directory for temporary Zsh files to prevent symlink +# attacks - only helps if $TMPDIR points to a safe directory (which should be +# true with the settings in shell/env). +TMPPREFIX="$TMPDIR/zsh" + source_config ~/.zsh/env.local -- 2.45.2