gemini-cli PR moves full-chat error reports out of world-readable /tmp
Neal006 · ghdev · 2026-11-02
A community PR (#30088) for gemini-cli fixes a privacy issue: error reports (gemini-client-error-.json) contain the full chat history but were written to os.tmpdir() with default permissions, leaving them world-readable on Linux/macOS. The PR relocates them to /.gemini/tmp/error-reports/, creates the directory with 0700 and files with 0600, and reuses existing sandbox handling via Storage.getGlobalTempDir(). The author notes this won't stop antivirus software from quarantining transcripts (the original #15404 issue), but stops dropping full transcripts into the system temp dir on every API error.
More from coding & agent
- Revolut cuts AI costs 10x by self-hosting GLM on 56 B200s, boosting lead time 70% — SumitGup · 2026-11-02
- mitsuhiko's agent-built readline rewrite sparks GPL-to-MIT license laundering debate — mitsuhiko · 2026-11-02
- Weaviate Podcast #148: MIT's 'Machine Studying' lets agents prep before tasks arrive — CShorten30 · 2026-11-02
- 4B coding model generates Three.js scenes with GLB export for Godot game assets — ConfidentDinner6648 · 2026-11-02
- Solo dev ships multiplayer party game Panic Pit with Claude Code after a stranger paid $5 — Scary_League5349 · 2026-11-02
- Turing Post Curates 10 Best Papers and Videos on Agent Harness Engineering — TheTuringPost · 2026-11-02