{"action":"created","issue":{"url":"https://api.github.com/repos/cockroachdb/cockroach-go/issues/12","repository_url":"https://api.github.com/repos/cockroachdb/cockroach-go","labels_url":"https://api.github.com/repos/cockroachdb/cockroach-go/issues/12/labels{/name}","comments_url":"https://api.github.com/repos/cockroachdb/cockroach-go/issues/12/comments","events_url":"https://api.github.com/repos/cockroachdb/cockroach-go/issues/12/events","html_url":"https://github.com/cockroachdb/cockroach-go/issues/12","id":145047158,"number":12,"title":"security: Use `/var/tmp` safely","user":{"login":"bdarnell","id":160562,"avatar_url":"https://avatars2.githubusercontent.com/u/160562?v=3","gravatar_id":"","url":"https://api.github.com/users/bdarnell","html_url":"https://github.com/bdarnell","followers_url":"https://api.github.com/users/bdarnell/followers","following_url":"https://api.github.com/users/bdarnell/following{/other_user}","gists_url":"https://api.github.com/users/bdarnell/gists{/gist_id}","starred_url":"https://api.github.com/users/bdarnell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bdarnell/subscriptions","organizations_url":"https://api.github.com/users/bdarnell/orgs","repos_url":"https://api.github.com/users/bdarnell/repos","events_url":"https://api.github.com/users/bdarnell/events{/privacy}","received_events_url":"https://api.github.com/users/bdarnell/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-03-31T23:46:02Z","updated_at":"2017-04-27T02:56:16Z","closed_at":null,"body":"In a multi-user system, the testserver binary could have been written by another user and may be malicious. We should include the username in the path (either in the filename or as an intermediate directory; I think a directory might be a little safer) and verify that ownership and permissions are as expected.\n"},"comment":{"url":"https://api.github.com/repos/cockroachdb/cockroach-go/issues/comments/297597481","html_url":"https://github.com/cockroachdb/cockroach-go/issues/12#issuecomment-297597481","issue_url":"https://api.github.com/repos/cockroachdb/cockroach-go/issues/12","id":297597481,"user":{"login":"benesch","id":882976,"avatar_url":"https://avatars2.githubusercontent.com/u/882976?v=3","gravatar_id":"","url":"https://api.github.com/users/benesch","html_url":"https://github.com/benesch","followers_url":"https://api.github.com/users/benesch/followers","following_url":"https://api.github.com/users/benesch/following{/other_user}","gists_url":"https://api.github.com/users/benesch/gists{/gist_id}","starred_url":"https://api.github.com/users/benesch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/benesch/subscriptions","organizations_url":"https://api.github.com/users/benesch/orgs","repos_url":"https://api.github.com/users/benesch/repos","events_url":"https://api.github.com/users/benesch/events{/privacy}","received_events_url":"https://api.github.com/users/benesch/received_events","type":"User","site_admin":false},"created_at":"2017-04-27T02:56:16Z","updated_at":"2017-04-27T02:56:16Z","body":"@bdarnell, should we perhaps use user cache dirs instead? I.e., `$XDG_CACHE_HOME/cockroach` (default `$HOME/.cache/cockroach`) on Unix, `~/Library/Caches/Cockroach` on macOS, and `%appdir%/Cockroach` on Windows."}}
{"actor":{"display_login":"benesch"}}