From 7d5202e29e73831d84583dc2d54a0f6011643ced Mon Sep 17 00:00:00 2001
From: CentOS Sources <bugs@centos.org>
Date: Jun 23 2022 17:34:28 +0000
Subject: import rig-1.1-3.el8


---

diff --git a/SOURCES/rig-full-random-temp.patch b/SOURCES/rig-full-random-temp.patch
new file mode 100644
index 0000000..a9d6c47
--- /dev/null
+++ b/SOURCES/rig-full-random-temp.patch
@@ -0,0 +1,59 @@
+From 90c5505d82b288bbc0b2e8b01e85b78d18a0bd18 Mon Sep 17 00:00:00 2001
+From: Jake Hunsaker <jhunsake@redhat.com>
+Date: Thu, 9 Jun 2022 14:26:02 -0400
+Subject: [PATCH] [rig] Use `tempfile` module for temp directory creation
+
+Previously, a change was made to temp directory creation in an effort to
+make it more secure. While that was largely handled, it left us with an
+unhandled error in an edge case configuration. Rather than putting a
+band-aid over that again, re-write the temp directory creation process
+to leverage the `tempfile` module, so that we can safely and completely
+ignore the id/name of a rig, and leave the use of that for the
+communication socket.
+
+Signed-off-by: Jake Hunsaker <jhunsake@redhat.com>
+---
+ rigging/rigs/__init__.py | 13 +++++++------
+ 1 file changed, 7 insertions(+), 6 deletions(-)
+
+diff --git a/rigging/rigs/__init__.py b/rigging/rigs/__init__.py
+index f14f312..29bb8b4 100644
+--- a/rigging/rigs/__init__.py
++++ b/rigging/rigs/__init__.py
+@@ -18,6 +18,7 @@ import string
+ import socket
+ import sys
+ import tarfile
++import tempfile
+ import time
+ 
+ from argparse import Action
+@@ -110,7 +111,7 @@ class BaseRig():
+             self.log_debug("Initializing %s rig %s" %
+                            (self.resource_name, self.id))
+             self._sock, self._sock_address = self._create_rig_socket()
+-            self._tmp_dir = self._create_temp_dir()
++            self._create_temp_dir()
+             self.files = []
+ 
+     def set_rig_id(self):
+@@ -196,11 +197,11 @@ class BaseRig():
+         Create a temp directory for rig to use for saving created files too
+         """
+         try:
+-            _dir = "%s.%s/" % (RIG_TMP_DIR_PREFIX, self.id)
+-            os.makedirs(_dir)
+-            return _dir
+-        except OSError:
+-            raise CannotConfigureRigError('failed to create temp directory')
++            self._tmp_dir = tempfile.mkdtemp(prefix='rig.', dir='/var/tmp')
++        except Exception as err:
++            raise CannotConfigureRigError(
++                "failed to create temp directory: %s" % err
++            )
+ 
+     def _load_args(self):
+         """
+-- 
+2.35.3
+
diff --git a/SPECS/rig.spec b/SPECS/rig.spec
index cff84df..ff9cd29 100644
--- a/SPECS/rig.spec
+++ b/SPECS/rig.spec
@@ -1,7 +1,7 @@
 Name:       rig
 Summary:    Monitor a system for events and trigger specific actions
 Version:    1.1
-Release:    2%{?dist}
+Release:    3%{?dist}
 Url:        https://github.com/TurboTurtle/rig
 Source0:    %{url}/archive/%{name}-%{version}.tar.gz
 License:    GPLv2
@@ -16,6 +16,7 @@ BuildRequires: python3dist(systemd-python)
 BuildRequires: python3dist(psutil)
 
 Patch1: rig-fix-rig-list.patch
+Patch2: rig-full-random-temp.patch
 
 %description
 Rig is a utility designed to watch or monitor specific system resources (e.g.
@@ -26,6 +27,7 @@ troubleshooting and data collection for randomly occurring events.
 %prep
 %setup -q
 %patch1 -p1
+%patch2 -p1
 
 %build
 %py3_build
@@ -46,6 +48,9 @@ install -p -m644 man/en/rig.1 ${RPM_BUILD_ROOT}%{_mandir}/man1/
 %doc README.md
 
 %changelog
+* Mon Jun 13 2022 Jake Hunsaker <jhunsake@redhat.com> - 1.1-3
+- Backport change to temp dir creation to ignore rig ID
+
 * Tue May 31 2022 Jake Hunsaker <jhunsake@redhat.com> - 1.1-2
 - Backport fix of rig list race condition