Yama: not so fast

But you're only plugging holes which can more easily be plugged by fixing several hundreds of thousands of broken userspace apps. The latter is surely faster than writing one not terribly large kernel patch.

Or something.

(No, I can't figure out what their rationale could be, either. I note that nobody has come up with a single case, even an academic one, which your /tmp-race-fixing restrictions would break. But it's apparently unacceptable anyway.)