From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 4933 invoked by alias); 24 Nov 2010 21:27:38 -0000 Received: (qmail 4922 invoked by uid 22791); 24 Nov 2010 21:27:37 -0000 X-SWARE-Spam-Status: No, hits=-5.6 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_HI,SPF_HELO_PASS,TW_DB,T_RP_MATCHES_RCVD X-Spam-Check-By: sourceware.org Received: from mx1.redhat.com (HELO mx1.redhat.com) (209.132.183.28) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Wed, 24 Nov 2010 21:27:32 +0000 Received: from int-mx09.intmail.prod.int.phx2.redhat.com (int-mx09.intmail.prod.int.phx2.redhat.com [10.5.11.22]) by mx1.redhat.com (8.13.8/8.13.8) with ESMTP id oAOLRVP0013200 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Wed, 24 Nov 2010 16:27:31 -0500 Received: from valrhona.uglyboxes.com (ovpn01.gateway.prod.ext.phx2.redhat.com [10.5.9.1]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id oAOLRStA009431 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Wed, 24 Nov 2010 16:27:30 -0500 Message-ID: <4CED8245.6040009@redhat.com> Date: Wed, 24 Nov 2010 21:27:00 -0000 From: Keith Seitz User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.9) Gecko/20100921 Fedora/3.1.4-1.fc13 Lightning/1.0b3pre Thunderbird/3.1.4 MIME-Version: 1.0 To: Jan Kratochvil CC: gdb-patches@sourceware.org Subject: Re: [RFA] .gdbinit security (revived) [incl doc] References: <4CE702E7.4050504@redhat.com> <83d3q0babs.fsf@gnu.org> <4CEC0757.6000503@redhat.com> <20101124212331.GA18195@host0.dyn.jankratochvil.net> In-Reply-To: <20101124212331.GA18195@host0.dyn.jankratochvil.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-IsSubscribed: yes Mailing-List: contact gdb-patches-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: gdb-patches-owner@sourceware.org X-SW-Source: 2010-11/txt/msg00413.txt.bz2 On 11/24/2010 01:23 PM, Jan Kratochvil wrote: > So currently on `chmod 666 .gdbinit' it no longer traps... That's what (I interpreted?) Andreas as suggesting. > BTW do people really need this feature? I always use my alias gdbn to force > -nx to not load any .gdbinit, as I generally do not expect which project which > way changes my GDB behavior. I have no idea, really. I'm just trying to upstream a Fedora patch. From the original discussion, I gather that several linux distros are carrying similar patches. I presume there is a reason for it. [Was there a CERT alert that was published?] In any case, I'm rethinking a bunch of this... Stay tuned. Keith