system breach

[gareth]

On Fri 2006-12-29 (10:16), Jeremy Chadwick wrote:
> Apparently pkg_fetch will use either $PKG_TMPDIR or $TMPDIR as a
> temporary storage location for where things are stored.  Taken from
> the manpage in pkgtools-2.2.2/man/pkg_fetch.1:
> 
>   PKG_TMPDIR
>   TMPDIR         (In that order) Temporary directory where pkg_fetch down-
>                  loads files temporarily.  If neither is not defined,
>                  ``/var/tmp'' is used.
> 
> Do either of the reporters have PKG_TMPDIR or TMPDIR defined in
> make.conf, their own dotfiles, root's dotfiles, or within their
> php.ini?

thanx for all the detective work, i grepped for TMPDIR and download
in the ports tree and didn't find anything worthwhile. however, found
this in the go-pear file in /usr/ports/distfiles/pear-1.4.11.tar.bz2:

putenv('PHP_PEAR_DOWNLOAD_DIR=' . $temp_dir . '/download')