Peter Palfrader

The issue allows unauthorized users to access the X session due to a segfault when using libpam-opensc, which returns the underlying xsession.

The issue concerns the `debug mode` function in `web/web.py`, which uses the `/tmp/onionshare server.log` pathname for logging when `--debug` is enabled. This might allow local users to overwrite files or obtain sensitive information by using this pathname.