Gource up to and including 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling malicious users to overwrite an arbitrary file via a symlink attack.
gource gource