Re: weblily: security risk

2010-03-10 Thread Graham Percival
I apologize for this email; I jumped to a false conclusion and made a baseless accusation. I now have no reason to believe that weblily poses a risk. I'm sorry. - Graham Percival On Wed, Mar 10, 2010 at 08:21:24PM +, Graham Percival wrote: > Mr. Weblily, > > I like your enthusiasm with yo

Re: weblily: security risk

2010-03-10 Thread Graham Percival
I admit that I only tested getcwd, but doesn't a jail normally report the main dir as / rather than /home/lily ? ... hmm, ok, apparently not. Ok, it might be safe after all. At least, my earlier investigations were flawed, and I'm not keen to continue snooping around. - Graham On Wed, Mar 10,

Re: weblily: security risk

2010-03-10 Thread Han-Wen Nienhuys
this is what weblily wrote to me a couple of weeks ago. ** Hi Han-Wen, I've continued to work on weblily.net. Now it looks to me almost like something useful. Of cource, I've taken your advice and now LilyPond is running in a jail. Quite cool: I modified the notation reference: When you click on

weblily: security risk

2010-03-10 Thread Graham Percival
Mr. Weblily, I like your enthusiasm with your weblily project, but for Mao's sake please learn something about computer security. The current website is completely insecure. This is not a theoretical concern. It would take me approximately two minutes to delete everything in your /home/lily/ di

Re: website translation infrastructure

2010-03-10 Thread Graham Percival
On Tue, Mar 09, 2010 at 08:13:57PM +0100, Francisco Vila wrote: > 2010/3/5 Graham Percival : > > texinfo is using Documentation/macros.itexi instead of > > Documentation/es/macros.itexi.  Try playing with the -I dirs given > > in website.make.  (lines 89-98) > > weblinks.itexi is being generated