Re: [htdig3-dev] Re: Status & Moving files


Subject: Re: [htdig3-dev] Re: Status & Moving files
From: Geoff Hutchison (ghutchis@wso.williams.edu)
Date: Wed Feb 02 2000 - 10:05:34 PST


On Wed, 2 Feb 2000, Gilles Detillieux wrote:

> roll out the pre-release. I'll try to get it in in the next hour or two.
> Also, I just realised that we had a +3 vote back in October for Joe's
> proposed max_keywords attribute, which I developed as a patch to 3.1.4
> back in December, and forgot to adapt to 3.2, so I'll try to get it

I've been in classes all morning and I wasn't planning on making a
snapshot until at least the local_urls patch gets in. (Don't worry so much
about documentation changes, we'll get that later.) I doubt I'll actually
get to make the snapshot for another 4 hours or so.

> you don't deliberately do something like that, and your PATH is OK, it
> should find the right program. If you have time to implement some of
> the autoconfig ideas proposed, though, I think that would be better.

Putting in an autoconf macro is fine, but I'll point out that it still
needs to back off to the PATH--people can move binaries after the time of
compilation.

Besides, there isn't a whole lot of security risk here--if your mv command
is compromised, I think you have *many* problems beyond potentially
running under the htfuzzy shell. For example, most people would wish to
use "mv" in their rundig scripts, which often run once a day and sometimes
as root!

-Geoff

------------------------------------
To unsubscribe from the htdig3-dev mailing list, send a message to
htdig3-dev-unsubscribe@htdig.org
You will receive a message to confirm this.



This archive was generated by hypermail 2b28 : Wed Feb 02 2000 - 10:07:27 PST