Document mktemp() calls and other unpalatable stuff.

avsm · Dec 6, 2000 · d6c3b52 · d6c3b52
1 parent 9074e03
commit d6c3b52
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/misc/rpm/pkg/SECURITY b/misc/rpm/pkg/SECURITY
@@ -0,0 +1,9 @@
+$OpenBSD: SECURITY,v 1.1 2000/12/06 09:48:38 espie Exp $
+
+rpm uses a few mktemp, but looking at these, they all appear to be wrapped
+and calling open() properly.
+
+Note that rpm has some inherent security problems anyway. Who should you
+trust when installing RPMs on your system ? Its use should probably be 
+limited to installing linux-compatibility library, within ports, with
+proper md5 checksumming.