On Wed, May 02, 2012 at 11:44:52AM +0200, Marco d'Itri wrote:
> On May 02, Jari Aalto <[email protected]> wrote:
>
> > Option not enabled. Recompile with -DDEBUG.
> Maybe there is a reason if this is not the default.
> Did you investigate which side effects this causes, especially related
> to performances?
as using -D has some security issues:
| SECURITY
| When tin is started in debug mode (ââ-D nââ) it will create world
readâ
| able files in $TMPDIR which may contain the users NNTP password in
| cleartext. On multiuser-systems $TMPDIR should be set to a safe locaâ
| tion before starting tin in debug mode (e.g. TMPDIR=$HOME tin -D 1).
the default is to disable -D at compile time. If tin wouldn't use $TMPDIR
but i.e. ${TIN_HOMEDIR:-"$HOME"} or the like as default localtion this
wouldn't be an issue, unfortunately $TMPDIR (or even hardcoded /tmp) was
choosen about 20 years ago and I don't like to change the "well known"
location of files...
When tin is compiled with -DDEBUG // --enable-debug but "-D n" isn't given
at startup there should be no noticible drawbacks; all the debugging code is
guarded by
#ifdef DEBUG
if (debug & DEBUG_LEVEL) {
/* ... */
}
#endif
HTH,
urs
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
