opscode/omnibus — pull request #10 by tmatilai (2012-10-15 02:32:06+00:00)
Title: [CHEF-3527] Use random temporary directory for downloads

Ticket: http://tickets.opscode.com/browse/CHEF-3527

Hardcoded/predictable filename in world writeable /tmp directory made the system vulnerable to symlink attacks.

Try to use mktemp in a compatible way, but fallback to /tmp if it anyhow fails.