Bug#682826: world writable directories possible patch

2012-09-01 Thread Barak A. Pearlmutter
Yeah you're right, common-lisp-controller would be the thing. Patches welcome! --Barak. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#682826: world writable directories possible patch

2012-09-01 Thread Florian Weimer
* Barak A. Pearlmutter: > - have a setuid program that builds fasl files from trusted sources, >which in practice means download them itself or from .deb packages Or a daemon, given that it's difficult to write SUID programs in Lisp. I thought we had common-lisp-controller for that? -- To

Bug#682826: world writable directories possible patch

2012-09-01 Thread Barak A. Pearlmutter
Yeah. The "right thing" is to either: - disable the functionality - have a per-user exported fasl file dir in their home directory, and an easy way for users to add other users they trust to their search path - have a setuid program that builds fasl files from trusted sources, which

Bug#682826: world writable directories possible patch

2012-09-01 Thread Florian Weimer
> Using chmod 1777 could help? > > I attached a patch just in case it does. Not really, I think. Users cannot build .fasl files for other users because they could supply crafted ones which do something different from what the original Lisp sources do. -- To UNSUBSCRIBE, email to debian-bugs-rc

Bug#682826: world writable directories possible patch

2012-08-21 Thread Jeremias
Hi: Using chmod 1777 could help? I attached a patch just in case it does. Cheers, -- Jeremías--- ilisp.postinst.orig 2012-08-21 16:39:21.911900568 -0300 +++ ilisp.postinst 2012-08-21 16:38:51.211748311 -0300 @@ -65,7 +65,7 @@ case "$1" in configure) set_keybindings - chmod 777 /usr/li