[GHC] #6017: Reading ./.ghci files raises security issues

[GHC]

#6017: Reading ./.ghci files raises security issues
---------------------------------+------------------------------------------
    Reporter:  nomeata           |       Owner:  pminten         
        Type:  task              |      Status:  patch           
    Priority:  high              |   Milestone:  7.8.1           
   Component:  GHCi              |     Version:  7.4.1           
    Keywords:                    |          Os:  Unknown/Multiple
Architecture:  Unknown/Multiple  |     Failure:  Other           
  Difficulty:  Unknown           |    Testcase:                  
   Blockedby:                    |    Blocking:                  
     Related:                    |  
---------------------------------+------------------------------------------

Comment(by simonmar):

 Let's not go overboard here. Even if we do a whitelist, someone will point
 out that we should be adding hashes of the .ghci file to the whitelist and
 failing if the hash doesn't match.

 If people think that this is really a security problem (and I'm not
 convinced it is, e.g. `gdb` reads `.gdbinit` unconditionally), then we can
 just switch the default to not read `.ghci` files in the current
 directory, and add a flag to enable it (`-ignore-dot-ghci` ignores all,
 but we want a way to just ignore the one in the current directory).  If
 you want to read a specific `.ghci` by default then there are lots of ways
 to do it: add some code to your `~/.ghci` to implement an explicit
 whitelist, or invoke ghci via a script or a shell alias.

-- 
Ticket URL: <http://hackage.haskell.org/trac/ghc/ticket/6017#comment:8>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler