Re: Automake security problem

2000-03-03 Thread Alexandre Oliva
On Mar 3, 2000, Bernard Dautrevaux <[EMAIL PROTECTED]> wrote: >> From: Jim Meyering [mailto:[EMAIL PROTECTED]] >> >> Your arguments don't hold water. Indeed :-) > This problem is NOT with xargs; it's with the generated command line > (which is usually limited to 10240 characters by the underl

Re: Automake security problem

2000-03-03 Thread François Pinard
Jim Meyering <[EMAIL PROTECTED]> writes: > Bob Friesenhahn <[EMAIL PROTECTED]> writes: > | I am using CVS automake. After doing a 'make dist', I find that all > | the files in my source directories are marked world read/write. This > | makes it easier for others to add trojan horses to the code

Re: Automake security problem

2000-03-03 Thread François Pinard
Alexandre Oliva <[EMAIL PROTECTED]> writes: > On Mar 2, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: > > Alexandre Oliva <[EMAIL PROTECTED]> wrote: > > | On Mar 1, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: > > | > Don't use `ln' (which was just a space optimization anyway) > > | A

RE: Automake security problem

2000-03-03 Thread Bernard Dautrevaux
> -Original Message- > From: Jim Meyering [mailto:[EMAIL PROTECTED]] > Sent: Thursday, March 02, 2000 10:11 PM > To: Alexandre Oliva > Cc: Bob Friesenhahn; [EMAIL PROTECTED] > Subject: Re: Automake security problem > > > Alexandre Oliva <[EMAIL PROTECTED

Re: Automake security problem

2000-03-02 Thread Steve Robbins
On 2 Mar 2000, Alexandre Oliva wrote: > On Mar 2, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: > > > Alexandre Oliva <[EMAIL PROTECTED]> wrote: > > | On Mar 1, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: > > | > > | > Don't use `ln' (which was just a space optimization anyway) > > |

Re: Automake security problem

2000-03-02 Thread Jim Meyering
Alexandre Oliva <[EMAIL PROTECTED]> writes: | On Mar 2, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: | > That'd be ok if there were a compelling reason to continue using such | > hacks, but in any case, please don't advocate use of -exec in cases | > like this. Using xargs is more efficient: |

Re: Automake security problem

2000-03-02 Thread Alexandre Oliva
On Mar 2, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: > Alexandre Oliva <[EMAIL PROTECTED]> wrote: > | On Mar 1, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: > | > | > Don't use `ln' (which was just a space optimization anyway) > | > | A worthwhile optimization, IMO. > Worthwhile? Why?

Re: Automake security problem

2000-03-02 Thread Greg A. Woods
[ On , March 2, 2000 at 10:32:57 (+0100), Jim Meyering wrote: ] > Subject: Re: Automake security problem > > Alexandre Oliva <[EMAIL PROTECTED]> wrote: > | On Mar 1, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: > | > | > Don't use `ln' (which was

Re: Automake security problem

2000-03-02 Thread Jim Meyering
Alexandre Oliva <[EMAIL PROTECTED]> wrote: | On Mar 1, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: | | > Don't use `ln' (which was just a space optimization anyway) | | A worthwhile optimization, IMO. There are some `find' hacks in the Worthwhile? Why? Sure it saves space for the `dist'

Re: Automake security problem

2000-03-01 Thread Sascha Demetrio
Alexandre Oliva wrote: > On Mar 1, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: > > > Don't use `ln' (which was just a space optimization anyway) > > A worthwhile optimization, IMO. [...] Maybe using `ln' in `make dist' should be optional? The links in the dist directory can easily becom

Re: Automake security problem

2000-03-01 Thread Tom Tromey
Jim> Here's an untested patch. I'll look at this soon. Jim> BTW, Tom, what about that last patch I sent in (testing for close Jim> failure)? Yeah :-( I haven't had much automake hacking time for a while (again). I guess I'd like to get more people checkin rights to make up for my failings. Ji

Re: Automake security problem

2000-03-01 Thread Alexandre Oliva
On Mar 1, 2000, Jim Meyering <[EMAIL PROTECTED]> wrote: > Don't use `ln' (which was just a space optimization anyway) A worthwhile optimization, IMO. There are some `find' hacks in the `dist' rules to avoid modifying the permissions in the source tree, but, unfortunately, they do not app

Re: Automake security problem

2000-03-01 Thread Jim Meyering
Bob Friesenhahn <[EMAIL PROTECTED]> writes: | I am using CVS automake. After doing a 'make dist', I find that all | the files in my source directories are marked world read/write. This | makes it easier for others to add trojan horses to the code I write. Ick. Thanks for providing the impetus

Automake security problem

2000-02-29 Thread Bob Friesenhahn
I am using CVS automake. After doing a 'make dist', I find that all the files in my source directories are marked world read/write. This makes it easier for others to add trojan horses to the code I write. Bob == Bob Friesenhahn [EMAIL PROTECTED] http://www.s