What are common /tmp security risks?

Common security risks associated with the /tmp directory in Linux include:

1. Unauthorized Access: Since /tmp is writable by all users, malicious users can create files that may overwrite or interfere with legitimate applications or processes.

2. Race Conditions: Attackers can exploit race conditions by creating a file in /tmp with a known name, then tricking a program into using that file instead of a legitimate one. This can lead to privilege escalation or unauthorized access.

3. Malicious Executables: If the /tmp directory is mounted with executable permissions, attackers can place malicious scripts or binaries there, which could be executed by unsuspecting users or processes.

4. Sensitive Data Exposure: Applications may inadvertently store sensitive information in /tmp, which can be accessed by other users. This can lead to data leaks or unauthorized access to confidential information.

5. Denial of Service (DoS): An attacker could fill the /tmp directory with large files, consuming disk space and potentially causing legitimate applications to fail due to lack of available space.

To mitigate these risks, it's important to implement security measures such as setting appropriate permissions, using secure coding practices, and regularly monitoring the contents of the /tmp directory.