From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 13408 invoked by alias); 19 Jan 2012 21:32:07 -0000 Received: (qmail 13400 invoked by uid 22791); 19 Jan 2012 21:32:05 -0000 X-SWARE-Spam-Status: No, hits=-6.6 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_HI,SPF_HELO_PASS,T_RP_MATCHES_RCVD X-Spam-Check-By: sourceware.org Received: from mx1.redhat.com (HELO mx1.redhat.com) (209.132.183.28) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Thu, 19 Jan 2012 21:31:51 +0000 Received: from int-mx01.intmail.prod.int.phx2.redhat.com (int-mx01.intmail.prod.int.phx2.redhat.com [10.5.11.11]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id q0JLVZGn001568 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 19 Jan 2012 16:31:35 -0500 Received: from host2.jankratochvil.net (ovpn-116-21.ams2.redhat.com [10.36.116.21]) by int-mx01.intmail.prod.int.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id q0JLVVJF006572 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Thu, 19 Jan 2012 16:31:34 -0500 Date: Thu, 19 Jan 2012 21:47:00 -0000 From: Jan Kratochvil To: Tom Tromey Cc: Joel Brobecker , Eli Zaretskii , dje@google.com, gdb-patches@sourceware.org Subject: Re: [patch] New set auto-load-local-gdbinit + disable it by default Message-ID: <20120119213130.GA14664@host2.jankratochvil.net> References: <20120117162621.GA3883@host2.jankratochvil.net> <837h0q5i4u.fsf@gnu.org> <20120117175957.GA9415@host2.jankratochvil.net> <83ty3u3uj1.fsf@gnu.org> <20120118035927.GY31383@adacore.com> <20120118191846.GA21957@host2.jankratochvil.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) X-IsSubscribed: yes Mailing-List: contact gdb-patches-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: gdb-patches-owner@sourceware.org X-SW-Source: 2012-01/txt/msg00716.txt.bz2 On Thu, 19 Jan 2012 22:05:46 +0100, Tom Tromey wrote: > I am sold on the security changes, but I'm not as convinced about the > other stuff. In particular, as Doug points out, the PROGRAM-gdb.rc > thing needs design work; but there doesn't seem to be a technical need > to link this to a security improvement. Yes, I am going to post it separately. The general plan is something like: set auto-load scripts (from set auto-load-scripts), for all of *-gdb.py, *-gdb.rc and .debug_gdb_scripts set auto-load local-gdbinit # I think system-gdbinit and home-gdbinit make no sense to configure this way set auto-load jit set auto-load libthread_db set auto-load safe-path "" info auto-load (from info auto-load-scripts) Thanks for catching JIT, that is really another security issue. Thanks, Jan