[Fwd: Bug#94739: ./.ghci -- isn't it dangerous?]

[Michael Weber]

Please, preserve the Cc: when replying.

----- Forwarded message from Michal Politowski <mpol at charybda.icm.edu.pl> -----

Date: Sat, 21 Apr 2001 18:57:01 +0200
From: Michal Politowski <mpol at charybda.icm.edu.pl>
Subject: Bug#94739: ./.ghci -- isn't it dangerous?
To: Debian Bug Tracking System <submit at bugs.debian.org>
Reply-to: Michal Politowski <mpol at charybda.icm.edu.pl>, 94739 at bugs.debian.org
Message-id: <20010421185700.A27581 at Amber.lab.icm.edu.pl>

Package: ghc5
Version: 5.00-1
Severity: normal

ghci will load .ghci from current directory and it can contain :! shell
commands, so if I run ghci in a directory writable by others bad things can
happen eg. to my files.
On the other hand it's useful.
Maybe it could be less dangerous if the immediately damaging stuff (:!) was
disabled and some warning printed if the file was writable (or owned) by someone else?

-- System Information
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux Amber 2.2.19 #1 Thu Mar 29 15:52:51 CEST 2001 i586

Versions of packages ghc5 depends on:
ii  gcc                       1:2.95.3-7     The GNU C compiler.               
ii  libc6                     2.2.2-4        GNU C Library: Shared libraries an
ii  libgmp3                   3.1.1-4        Multiprecision arithmetic library 
ii  libgmp3-dev               3.1.1-4        Multiprecision arithmetic library 
ii  libncurses5               5.2.20010318-1 Shared libraries for terminal hand
ii  libreadline4              4.2-2          GNU readline and history libraries
ii  perl                      5.6.0-21       Larry Wall's Practical Extracting 
ii  perl [perl5]              5.6.0-21       Larry Wall's Practical Extracting 

-- 
Michal Politowski -- mpol at lab.icm.edu.pl
Warning: this is a memetically modified message

----- End forwarded message -----

-- 
 /~\ ASCII ribbon | <phase> i'm stuck with junkies and bums
 \ / campaign     | <pleh> family?
  X  against      | <phase> you're not that close to me :)
 / \ HTML mail    |      -- IRC, #argv