dont load .gdbinit if it is world writable

Mike Frysinger vapier@gentoo.org
Sun Mar 4 23:08:00 GMT 2007


attached patch checks to see if the $PWD/.gdbinit file is world writable and 
if so, warn about this and refuse to load it

idea being that since you can execute just about anything in it, you dont want 
random people inserting this in it

of course, the usefulness of this is marginalized if .gdbinit is owned by a 
diff user and they just make it world readable but not world writable ... but 
i dont think a cwdbuf.st_uid == getuid() would be accepted ?
-mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 827 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/gdb-patches/attachments/20070304/84589ee9/attachment.sig>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gdb-dont-load-world-writable-gdbinit.patch
Type: text/x-diff
Size: 669 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/gdb-patches/attachments/20070304/84589ee9/attachment.bin>


More information about the Gdb-patches mailing list