Re: UDD bugs stale?
On Mon, 19 Mar 2012, Lucas Nussbaum wrote:
> I kind-of fail to see the point. If I run a script as user 'lucas',
> I of course expect it to be run as user 'lucas', and I need to trust
> the code to some level. How is that different with debbugs ?
It's only different with the configuration file when
DEBBUGS_CONFIG_FILE is set. If the configuration file is installed in
/etc/debbugs/config, it doesn't check for the UID to match.
The main idea was to avoid YA environmental variable that could be
used as a means to execute code that hadn't been checked previously...
and honestly, I didn't expect anyone to be using it to run a
configuration file stored in an arbitrary location. [I primarily
intended it to be used during testing.]
Don Armstrong
--
Taxes are not levied for the benefit of the taxed.
-- Robert Heinlein _Time Enough For Love_ p250
http://www.donarmstrong.com http://rzlab.ucr.edu
Reply to: