Agent log names are inscrutable #1761
Labels
Bug
An error, flaw, misbehavior or failure in the Monkey or Monkey Island.
Complexity: Low
Impact: High
Security
The agent logs are named
/tmp/user-1563
and%temp%\~df1563.tmp
. As far as I can tell, these names are meaningless. A name likeinfection-monkey-agent.log
would be much more user-friendly.In addition, using a constant file name like this in
/tmp
on Linux opens Infection Monkey to a denial of service attack. The actual risk and impact of this "attack" is extremely low, however, it's annoying when you receive the following error on a machine that developers share:Here's a suggested mechanism for creating the log file name:
Tasks
tempfile.mkstemp()
or similar to add a random component to the file's name. Including the date/time would be nice, too. @ilija-lazoroskiThe text was updated successfully, but these errors were encountered: