On: “Exit traps” can make your Bash scripts more robus...

[armchairhacker]

The program could get paused mid-execution. Moreover, I’m pretty sure a malicious process can put file watchers in /tmp and read all written contents.

[ericbarrett → armchairhacker]

If your script calls

  umask 077

...before creating temp files then they won't be world-readable. Still lots of pitfalls. (What user are you running as, and who else is running as that user? What's the mount point file system, and does it have POSIX permissions? Why are you persisting secrets to disk in the first place? Etc.)