[GHC] #5690: Enable RTS opts by default with security warning

GHC cvs-ghc at haskell.org
Sun Dec 11 20:22:36 CET 2011


#5690: Enable RTS opts by default with security warning
------------------------------+---------------------------------------------
 Reporter:  EyalLotem         |          Owner:                  
     Type:  feature request   |         Status:  new             
 Priority:  normal            |      Component:  Compiler        
  Version:  7.2.1             |       Keywords:                  
       Os:  Unknown/Multiple  |   Architecture:  Unknown/Multiple
  Failure:  None/Unknown      |       Testcase:                  
Blockedby:                    |       Blocking:                  
  Related:                    |  
------------------------------+---------------------------------------------
 RTS options have security problems. However, disabling them has a lot of
 downsides.

 I propose enabling them by default, with a message like:

 "Warning: RTS options are enabled. This has the security implications
 explained by http://.... To disable RTS options, use -disable-rtsopts. To
 suppress this warning, use -enable-rtsopts."

 This would allow everyone to ignore the warning while in development, or
 explicitly enable rts opts as they do now.  Security-minded projects will
 not be likely to forget to disable the RTS opts given this warning.

-- 
Ticket URL: <http://hackage.haskell.org/trac/ghc/ticket/5690>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler



More information about the Glasgow-haskell-bugs mailing list