On Wed, Nov 30, 2016 at 04:21:52PM +0100, Tommaso Cucinotta wrote:
> On 30/11/2016 11:12, Kornel Benko wrote:
> > Am Mittwoch, 30. November 2016 um 00:06:59, schrieb Scott Kostyshak 
> > <skost...@lyx.org>
> > > Do we currently have a way of specifying preferences when running
> > > ctests? I think after Tommaso's security improvements, we need to put
> > > the following in the Testing/.lyx/preferences:
> > > 
> > > \use_converter_needauth_forbidden false
> > > \use_converter_needauth false
> 
> ops, very first instance of usability troubles after the security fix :-)...

Well I was actually happy to see the exports failing. Thank you for your
work on that. And as I mentioned it would be nice for other reasons to
modify the default preferences of the ctests.

> was it easy to spot that the tests were failing due to the new security 
> restriction ?

Yes. (1) I knew to expect it since I saw your improvements. (2) even if
I did not, when you go to export the manual, whether on the command line
or in the GUI the error gives and idea of what's going on.

> On a related note, I vaguely remember an old thread about monkey testing LyX, 
> leading to possible undesired side effects, such as LyX loading/saving or 
> even printing random files and what not... the other security patch, AA-based 
> hardening/sandboxing, could be used to restrict things that LyX can 
> potentially do during those/other tests, just in case...

Yes I remember that also. Those bug reports stopped coming after a
certain time. I'm not sure if the author got bored or we were not quick
with fixing the bugs (perhaps because they were strange cases?). I
thought it was a creative way of finding bugs.

Scott

Attachment: signature.asc
Description: PGP signature

Reply via email to