Re: LyX security (was Re: lyx-1.1.5fix1 port to OpenBSD)

2000-09-13 Thread Arnd Hanses
On Wed, 13 Sep 2000 13:08:24 -0700, Carl Ollivier-Gooch wrote: >> > And security/privacy means always security/privacy to be enforced by >> > default, unless somebody who knows what he is doing decides against >> > them. (Most commercial Linux distributions entirely would disagree; but >> > they

Re: LyX security (was Re: lyx-1.1.5fix1 port to OpenBSD)

2000-09-13 Thread Carl Ollivier-Gooch
John Levon wrote: > > On Wed, 13 Sep 2000, Arnd Hanses wrote: > > > On Wed, 13 Sep 2000 14:43:43 + (GMT), Carlos A M dos Santos wrote: > > > > And security/privacy means always security/privacy to be enforced by > > default, unless somebody who knows what he is doing decides against > > them

RE: LyX security (was Re: lyx-1.1.5fix1 port to OpenBSD)

2000-09-13 Thread John Levon
On Wed, 13 Sep 2000, Arnd Hanses wrote: > On Wed, 13 Sep 2000 14:43:43 + (GMT), Carlos A M dos Santos wrote: > > And security/privacy means always security/privacy to be enforced by > default, unless somebody who knows what he is doing decides against > them. (Most commercial Linux distribut

RE: LyX security (was Re: lyx-1.1.5fix1 port to OpenBSD)

2000-09-13 Thread Arnd Hanses
On Wed, 13 Sep 2000 14:43:43 + (GMT), Carlos A M dos Santos wrote: >On Wed, 13 Sep 2000, Juergen Vigna wrote: > >> Well wouldn't it be easier to specify in the /usr/local/share/lyx/lyxrc >> file that you want your files in ~/tmp and create a ~/tmp for every user? > >It's undocumented, at leas

RE: LyX security (was Re: lyx-1.1.5fix1 port to OpenBSD)

2000-09-13 Thread Carlos A M dos Santos
On Wed, 13 Sep 2000, Juergen Vigna wrote: > Well wouldn't it be easier to specify in the /usr/local/share/lyx/lyxrc > file that you want your files in ~/tmp and create a ~/tmp for every user? It's undocumented, at least in 1.1.4, but following your suggestion I found an example into lyxrc.exampl

Re: LyX security (was Re: lyx-1.1.5fix1 port to OpenBSD)

2000-09-13 Thread John Levon
On Wed, 13 Sep 2000, Carlos A M dos Santos wrote: > On Wed, 13 Sep 2000, John Levon wrote: > > > On Wed, 13 Sep 2000, Arnd Hanses wrote: > > > > How would this even be possible ? We are discussing the safety of gettext > > calls, the only way this could be a problem is if a) someone made LyX su

RE: LyX security (was Re: lyx-1.1.5fix1 port to OpenBSD)

2000-09-13 Thread Juergen Vigna
On 13-Sep-2000 Carlos A M dos Santos wrote: > > This works well, but has a drawback: all files created LyX will be go-rwx, > even those under the home directory. Well wouldn't it be easier to specify in the /usr/local/share/lyx/lyxrc file that you want your files in ~/tmp and create a ~/tmp for

Re: LyX security (was Re: lyx-1.1.5fix1 port to OpenBSD)

2000-09-13 Thread Carlos A M dos Santos
On Wed, 13 Sep 2000, Carlos A M dos Santos wrote: > One alternative is install LyX under it's own directory tree by > configurin it with "--prefix=/usr/local/lyx" Or perhaps renaming it /usr/local/bin/lyx.bin. -- Carlos A. M. dos Santos Federal University of Pelotas Meteorological Re

LyX security (was Re: lyx-1.1.5fix1 port to OpenBSD)

2000-09-13 Thread Carlos A M dos Santos
On Wed, 13 Sep 2000, John Levon wrote: > On Wed, 13 Sep 2000, Arnd Hanses wrote: > > How would this even be possible ? We are discussing the safety of gettext > calls, the only way this could be a problem is if a) someone made LyX suid > or b) someone used LyX in a suid app Or c) user root usin

Re: lyx-1.1.5fix1 port to OpenBSD

2000-09-13 Thread John Levon
On Wed, 13 Sep 2000, Arnd Hanses wrote: > On 13 Sep 2000 12:42:49 +0200, Jean-Marc Lasgouttes wrote: > > > > >I thought it was only a problem for suid programs... I would not give > >LyX such special rights, anyway... > > What, if a talented and qualified intrusor would be able to connect the >

Re: lyx-1.1.5fix1 port to OpenBSD

2000-09-13 Thread Arnd Hanses
On 13 Sep 2000 12:42:49 +0200, Jean-Marc Lasgouttes wrote: > >I thought it was only a problem for suid programs... I would not give >LyX such special rights, anyway... What, if a talented and qualified intrusor would be able to connect the functions to a suid program? This only means that one le

Re: lyx-1.1.5fix1 port to OpenBSD

2000-09-13 Thread Arnd Hanses
On Wed, 13 Sep 2000 10:55:11 + (GMT), Carlos A M dos Santos wrote: >Have you patched LyX or any other software to use native catgets? In my >system (FreeBSD 4.1-RELEASE) I have gettext-0.10.35 installed because it >is required by GNU make and wget, but LyX is statically linked to the >include

Re: lyx-1.1.5fix1 port to OpenBSD

2000-09-13 Thread Jules Bean
On Wed, Sep 13, 2000 at 05:15:17AM +0100, Arnd Hanses wrote: > On 13 Sep 2000 09:00:50 +0200, Lars Gullik Bjønnes wrote: > > >| --- po/Makefile.in.in.orig Tue Sep 12 18:57:02 2000 > >| +++ po/Makefile.in.in Tue Sep 12 18:51:04 2000 > >| @@ -24,6 +24,8 @@ gnulocaledir = $(prefix)/share/locale

Re: lyx-1.1.5fix1 port to OpenBSD

2000-09-13 Thread Lars Gullik Bjønnes
Carlos A M dos Santos <[EMAIL PROTECTED]> writes: | On 13 Sep 2000, Lars Gullik Bjønnes wrote: | | > Benjamin Karas <[EMAIL PROTECTED]> writes: | > | > | Maintained-by: [EMAIL PROTECTED] (David L. Johnson) | > | > Maintained-by: [EMAIL PROTECTED] (Lars Gullik Bjønnes) and the LyX Team |([EMA

Re: lyx-1.1.5fix1 port to OpenBSD

2000-09-13 Thread Carlos A M dos Santos
On Wed, 13 Sep 2000, Arnd Hanses wrote: > I think the OpenBSD-port should only use the native catgets, because > this has been security audited and is confirmed to work. GNU gettext > is messy, has potential security leaks and doesn't fit well into the > system, IMHO. It might even jeopardize the

Re: lyx-1.1.5fix1 port to OpenBSD

2000-09-13 Thread Carlos A M dos Santos
On 13 Sep 2000, Lars Gullik Bjønnes wrote: > Benjamin Karas <[EMAIL PROTECTED]> writes: > > | Maintained-by: [EMAIL PROTECTED] (David L. Johnson) > > Maintained-by: [EMAIL PROTECTED] (Lars Gullik Bjønnes) and the LyX Team >([EMAIL PROTECTED]) In BSD ports, "Maintained-by" means "who maintais

Re: lyx-1.1.5fix1 port to OpenBSD

2000-09-13 Thread Jean-Marc Lasgouttes
> "Arnd" == Arnd Hanses <[EMAIL PROTECTED]> writes: Arnd> I think the OpenBSD-port should only use the native catgets, Arnd> because this has been security audited and is confirmed to work. Arnd> GNU gettext is messy, has potential security leaks and doesn't Arnd> fit well into the system, IM

Re: lyx-1.1.5fix1 port to OpenBSD

2000-09-13 Thread Arnd Hanses
On 13 Sep 2000 09:00:50 +0200, Lars Gullik Bjønnes wrote: >| --- po/Makefile.in.in.orig Tue Sep 12 18:57:02 2000 >| +++ po/Makefile.in.inTue Sep 12 18:51:04 2000 >| @@ -24,6 +24,8 @@ gnulocaledir = $(prefix)/share/locale >| gettextsrcdir = $(prefix)/share/gettext/po >| subdir = po >|

Re: lyx-1.1.5fix1 port to OpenBSD

2000-09-12 Thread Lars Gullik Bjønnes
Benjamin Karas <[EMAIL PROTECTED]> writes: | Hello, | | I'm working on a port of lyx-1.1.5fix1 to OpenBSD. Everything compiled | fine, but two Makefiles gave me some trouble doing a fake install. I've | attached patches for po/Makefile.in.in and intl/Makefile.in. The changes | shouldn't break

lyx-1.1.5fix1 port to OpenBSD

2000-09-12 Thread Benjamin Karas
Hello, I'm working on a port of lyx-1.1.5fix1 to OpenBSD. Everything compiled fine, but two Makefiles gave me some trouble doing a fake install. I've attached patches for po/Makefile.in.in and intl/Makefile.in. The changes shouldn't break anything. I'm reusing the old DESC and COMMENT files.