pytest: privilege escalation via insecure temporary directory

A flaw in pytest enables privilege escalation via /tmp/pytest-of-user.