[mythtv-commits] Ticket #12300: Patch: Running mythfilldatabase can expose Schedules Direct userid

[MythTV]

#12300: Patch: Running mythfilldatabase can expose Schedules Direct userid
-------------------------------------------+-------------------------
     Reporter:  Bill Meek <keemllib@…>     |      Owner:  stuartm
         Type:  Patch - Bug Fix            |     Status:  new
     Priority:  minor                      |  Milestone:  unknown
    Component:  MythTV - Mythfilldatabase  |    Version:  Master Head
     Severity:  medium                     |   Keywords:
Ticket locked:  0                          |
-------------------------------------------+-------------------------
 In (at least) three places in libs/libmythtv/datadirect.cpp,
 the temporary file name used will be logged when running
 mythfilldatabase -v general --loglevel info. Most commonly
 at line 1044. The user's SD userid will be part of that file
 name:

 {{{
 2014-10-10 20:10:17.183423 I [12014/12014] CoreContext datadirect.cpp:1063
 (DDPost) - Writing to temporary file:
 [/tmp/mythtv_ddp_2SE2oM/mythtv_dd_cache_1_<yourSdUserIdHere>_UTC_20141009010942_to_20141026010942]
 }}}

 Suggest the attached patch, as the file name is already under
 a randomly selected directory in /tmp and also includes the
 start and end times for the current session.

 Tested on: v0.28-pre-2303-g0629905. To test, the backend
 must have more than 1 source. Single source backends don't
 create the file name in the same format.

--
Ticket URL: <https://code.mythtv.org/trac/ticket/12300>
MythTV <http://www.mythtv.org>
MythTV Media Center