pkg/51071: www/seamonkey-2.40nb1 uses fixed path in /tmp

[dholland%eecs.harvard.edu@localhost]

>Number:         51071
>Category:       pkg
>Synopsis:       www/seamonkey-2.40nb1 uses fixed path in /tmp
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Apr 15 17:10:00 +0000 2016
>Originator:     David A. Holland
>Release:        NetBSD 7.99.26 (20160304) pkgsrc 20160411
>Organization:
>Environment:
System: NetBSD macaran 7.99.26 NetBSD 7.99.26 (MACARAN) #35: Fri Mar 4 23:43:26 EST 2016 dholland@macaran:/usr/src/sys/arch/amd64/compile/MACARAN amd64
Architecture: x86_64
Machine: amd64
>Description:

seamonkey leaves behind a directory /tmp/mozilla_mozillaUser0 that it
apparently uses for download staging.

The problem is, it belongs to the first uid who downloads something in
seamonkey and then no other users can until it's removed.

>How-To-Repeat:

As above. Noticing it requires a desktop with more that one user,
which is perhaps uncommon these days.

>Fix:

It should probably have the abcdef123.profile-name string in it, or at
least the current username or uid. Failing that, use mkdtemp(3).