From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 16510 invoked by alias); 11 May 2012 19:38:20 -0000 Received: (qmail 16375 invoked by uid 22791); 11 May 2012 19:38:19 -0000 X-SWARE-Spam-Status: No, hits=-3.5 required=5.0 tests=AWL,BAYES_00,KHOP_RCVD_UNTRUST,RCVD_IN_HOSTKARMA_NO,RCVD_IN_HOSTKARMA_W,RCVD_IN_HOSTKARMA_WL X-Spam-Check-By: sourceware.org Received: from rock.gnat.com (HELO rock.gnat.com) (205.232.38.15) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Fri, 11 May 2012 19:38:05 +0000 Received: from localhost (localhost.localdomain [127.0.0.1]) by filtered-rock.gnat.com (Postfix) with ESMTP id A870B1C6E1E; Fri, 11 May 2012 15:38:04 -0400 (EDT) Received: from rock.gnat.com ([127.0.0.1]) by localhost (rock.gnat.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id k1VN43m4LX8T; Fri, 11 May 2012 15:38:04 -0400 (EDT) Received: from joel.gnat.com (localhost.localdomain [127.0.0.1]) by rock.gnat.com (Postfix) with ESMTP id 71D9B1C6D85; Fri, 11 May 2012 15:38:04 -0400 (EDT) Received: by joel.gnat.com (Postfix, from userid 1000) id 0D372145616; Fri, 11 May 2012 12:38:01 -0700 (PDT) Date: Fri, 11 May 2012 19:38:00 -0000 From: Joel Brobecker To: Jan Kratochvil Cc: Pedro Alves , gdb-patches@sourceware.org Subject: Re: [patch 1/2] Provide $ddir substitution for --with-auto-load-safe-path Message-ID: <20120511193801.GE5886@adacore.com> References: <20120509154640.GA12692@host2.jankratochvil.net> <4FAD56BE.7090703@redhat.com> <20120511181913.GD5886@adacore.com> <20120511182941.GF21798@host2.jankratochvil.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20120511182941.GF21798@host2.jankratochvil.net> User-Agent: Mutt/1.5.20 (2009-06-14) Mailing-List: contact gdb-patches-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: gdb-patches-owner@sourceware.org X-SW-Source: 2012-05/txt/msg00441.txt.bz2 > > it fits well with the new setting "auto-load script-dir" which is a list of > > directories where scripts are implicitly considered as safe. > > (a) It is called "set auto-load scripts-directory". > (To match the plural of "set auto-load gdb-scripts" > and "set auto-load python-scripts".) > > (b) (gdb) help set auto-load scripts-directory > [...] > Directories listed here need to be > present also in the 'set auto-load safe-path' option. > > I find violation of security coherency if there > exists "set auto-load safe-path" to permit loading files from also other > location. I proposing we ditch safe-path entirely, and merge it with scripts-directory. What good is it to have a directory in scripts-directory if it's not in safe-path at the same time? -- Joel