[opensuse] Firefox temporary files.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I noticed that Firefox stores content, such as PDF, that was displayed instead of downloaded, in the directory /tmp/mozilla_cer0. I would prefer to send that to an encrypted partition. Where can I configure the path, in Firefox? I don't see a setting. Also, I can't find the button for the advanced settings edit (the large table). It is not in the advanced tab of preferences. At least, I can't find it. I can browse to "about:config", though. Still, I don't see the temporary path in there, anyway. The alternative is creating a symlink, of course. Or moving the entire /tmp to encrypted path... which I hesitate to do. - -- Cheers Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlgfHUAACgkQtTMYHG2NR9WkjQCfcaskDH1YREngtZMN5iw8zDPF x04An0eG6zk8HcctLRsb6VCriofmXHrf =ki7z -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Hello
The following is what I do / use : Type "about:config" Then right click on blank area and create a new string value called browser.cache.disk.parent_directory,set its value to /MY_NEW_TMP_DIRECTORY Regards James -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 2016-11-06 13:16, James PEARSON wrote:
Ah! Thanks :-) But wait, that would be the cache, which is normally on .mozilla/firefox/RANDOM.default/Cache/ wouldn't it? I don't mean the cache, but the temporary download directory for display by plugins. Such as "display receipt", which is a PDF. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)

Carlos E. R. wrote:
I think firefox uses $TMPDIR|$TMP|$TEMP|/tmp in that order, try setting $TMPDIR. -- Per Jessen, Zürich (5.1°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Carlos E. R. wrote:
TMPDIR=whereever firefox -- Per Jessen, Zürich (5.2°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Am Sonntag, 6. November 2016, 13:08:27 schrieb Carlos E. R.:
Not only Firefox puts private information into /tmp. Because of that, /tmp is a ram disk here, like the systemd default. Go into single mode, cleanup your persistent /tmp, remove the /tmp line from /etc/fstab and # mkdir -p /etc/systemd/system/local-fs.target.wants # ln -s /usr/lib/systemd/system/tmp.mount /etc/systemd/system/local-fs.target.wants/tmp.mount # reboot Gruß Jan -- Nothing will be attempted if all possible objections must first be overcome. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Am Sonntag, 6. November 2016, 21:35:31 schrieb Carlos E. R.:
Use a ramdisk for /tmp and tell your program that creates these "some of the files" to put them in a persistent directory. Modeling the exception would be much easier than identifying and reconfiguring every single program that might store private data in /tmp. Gruß Jan -- There's three sides to every story, yours, mine and the cold hard truth. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Carlos E. R. composed on 2016-11-06 13:08 (UTC+0100):
I don't see any files in /tmp created by any Mozilla product. Is that directory a currently active one?
Where can I configure the path, in Firefox? I don't see a setting.
Still, I don't see the temporary path in there, anyway.
Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 2016-11-06 22:59, Felix Miata wrote:
Yes, absolutely. I can see there recent receipts in PDF form which I selected "display" instead of "download". It is downloaded then to the temporary directory and then calls a pdf viewer with that file. PDFs here are not displayed internally by Firefox. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)

Carlos E. R. composed on 2016-11-06 23:46 (UTC+0100):
Felix Miata wrote:
Carlos E. R. composed on 2016-11-06 13:08 (UTC+0100):
I don't see any files in /tmp created by any Mozilla product. Is that directory a currently active one?
PDFs here are not displayed internally by Firefox.
Because that's the way you want it? If displayed internally (as here in 45.4ESR and 49.0.2), you could save to a place of your choice. Based on absence of reponses here, I'd say ask on moznet or in one of the Mozilla forums what to do to keep FF from saving anything outside your profile directory. That it does so I have to think is at least potentially a security bug. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 2016-11-07 11:18, Felix Miata wrote:
Carlos E. R. composed on 2016-11-06 23:46 (UTC+0100):
Felix Miata wrote:
Yes. The internal viewer is far from being good enough, it displays badly many of the PDFs that I have to view. I see also .docx files in that tmp dir. And a .txt file.
The directory has "drwx------" permissions, and the files in there have "-r--------" permissions, so the settings are secure, same as inside home, but more difficult to locate. But as I have a crypto partition, it is preferable to use it. I do not know a mozilla method to change that directory, except to symlink it. This is what I did first. The other solution is to move the entire tmp directory. I did that, not for the system, but for my user: /home/cer/.profile: ... TMPDIR=/data/cripta/cer/tmp which is the safer solution, as it also protects files that might be used by other applications, such as libre office. This might have side effects: what happens if something, say a cron job, runs before I open the crypto partition? Maybe i should test for it, then set it. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)

On Mon, 7 Nov 2016 05:18:21 -0500 Felix Miata <mrmazda@earthlink.net> wrote:
I'm not sure that's the case (security bug). It's a proper use of tmp. It's supposed to be cleaned up when firefox closes, and that happens correctly on my machines. Files are deleted on firefox close, though the empty dir remains in tmp for next use. My firefox installs call atril (the mate version of evince) to open all pdfs and that's how it works here. Carlos, are the tmp files still there after you close firefox? (or do you not ever close firefox...) Ralph -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 2016-11-07 12:07, listreader wrote:
On Mon, 7 Nov 2016 05:18:21 -0500 Felix Miata <> wrote:
Carlos E. R. composed on 2016-11-06 23:46 (UTC+0100):
I never close it... as I hibernate the machine, this can mean weeks. Then one day I have to apply updates and reboot, so FF closes. Other times hibernate crashes. The older file in there is from July. Not earlier, which means to me there was a change in FF then. There was supposed to be a cronjob that deleted old /tmp files, but it was superseded with something from systemd that doesn't work right. Upstream says that /tmp should be a ramdisk, so apparently they do not care. Perhaps I should resurrect the old cron script. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)

Carlos E. R. wrote:
There was supposed to be a cronjob that deleted old /tmp files, but it was superseded with something from systemd that doesn't work right.
In Leap 42x, it's done by "systemd-tmpfiles-clean". per@office36:~> systemctl status systemd-tmpfiles-clean.timer ● systemd-tmpfiles-clean.timer - Daily Cleanup of Temporary Directories Loaded: loaded (/usr/lib/systemd/system/systemd-tmpfiles-clean.timer; static; vendor preset: disabled) Active: active (waiting) since Wed 2016-11-02 16:27:21 CET; 4 days ago Docs: man:tmpfiles.d(5) man:systemd-tmpfiles(8) per@office36:~> systemctl status systemd-tmpfiles-clean.service ● systemd-tmpfiles-clean.service - Cleanup of Temporary Directories Loaded: loaded (/usr/lib/systemd/system/systemd-tmpfiles-clean.service; static; vendor preset: disabled) Active: inactive (dead) since Sun 2016-11-06 16:44:30 CET; 20h ago Docs: man:tmpfiles.d(5) man:systemd-tmpfiles(8) Process: 20616 ExecStart=/usr/bin/systemd-tmpfiles --clean (code=exited, status=0/SUCCESS) Main PID: 20616 (code=exited, status=0/SUCCESS) -- Per Jessen, Zürich (5.4°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 2016-11-07 13:09, Per Jessen wrote:
Yes, same in 13.1. Yet /tmp is not cleared, it has files dated 2014. That's why I say it does not work. cer@Telcontar:~> ls -ltr /tmp | head total 17196 -rw-r--r-- 1 999 users 36313 Jan 16 2014 rpmlist.xfce.rescue.13.1-txt drwx------ 3 cer root 4096 Aug 25 2014 systemd-private-s9aQsL drwx------ 3 cer root 4096 Aug 25 2014 systemd-private-UUL8tZ drwx------ 3 cer root 4096 Sep 1 2014 systemd-private-jktmak drwx------ 3 cer root 4096 Sep 4 2014 systemd-private-9vvLQz drwx------ 3 cer root 4096 Sep 4 2014 systemd-private-gKc3Xd drwx------ 3 cer root 4096 Sep 5 2014 systemd-private-0u2UcV drwx------ 3 cer root 4096 Sep 11 2014 systemd-private-JP6xuG drwx------ 3 cer root 4096 Sep 15 2014 systemd-private-BIPsGE cer@Telcontar:~> -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)

Carlos E. R. wrote:
I suspect it needs to be configured. -- Per Jessen, Zürich (5.5°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

I autoclean tmp every few days but I forgot where it was and it took me a while to find it. Here I think it is: /etc/tmpfiles.d/tmp.conf and I think my customizing was/is: # Clear tmp directories separately, to make them easier to override # SUSE policy: we don't clean those directories d /tmp 1777 root root 3d d /var/tmp 1777 root root 10d Ralph -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 2016-11-07 13:38, listreader wrote:
Similarly here: d /tmp 1777 root root 100d d /var/tmp 1777 root root 300d But there is also this: # Exclude namespace mountpoints created with PrivateTmp=yes x /tmp/systemd-private-* x /var/tmp/systemd-private-* X /tmp/systemd-private-*/tmp X /var/tmp/systemd-private-*/tmp -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)

On Mon, 7 Nov 2016 13:48:39 +0100 "Carlos E. R." <robin.listas@telefonica.net> wrote:
Your 100d and 300d seems mighty long. Do you really want tmp files hanging around for that long (300d = almost a year). With 3d and 10d it has seemed to work perfectly fine for me. YMMV. The 'x' are old mountpoints, not files. Delete them manually or change the default configuration which does not delete them automatically. Ralph -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Felix Miata wrote:
Because that's the way you want it? If displayed internally (as here in 45.4ESR and 49.0.2), you could save to a place of your choice.
Doesn't matter. It still has to download the file to "somewhere" so it can be displayed. It doesn't try to use a web-based file as backing store for local display. Even html pages are downloaded, *somewhere*, locally (thus the idea of it being "cached"). That said, I believe acrobat can display some PDF's directly from the net while they are still downloading. But I don't think FF's internal reader does that as it's an "included" extension that just displays files (AFAIK, may have changed). -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 2016-11-07 18:11, Linda Walsh wrote:
The content of web pages is stored into ".mozilla/firefox/RANDOM.default/Cache/". PDF pages can be displayed by firefox own code, by plugins inside the window, or by applications outside of the window. The last case is my case, and firefox is using "/tmp/mozilla_NAME0". -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)
participants (7)
-
Carlos E. R.
-
Felix Miata
-
James PEARSON
-
Jan Ritzerfeld
-
Linda Walsh
-
listreader
-
Per Jessen