On Wed, Mar 31, 1999 at 08:32:16AM -0600, Jeff Hostetler wrote:
> in abi/src/config/abi_defs.mk there's a line "ABI_OPT_DEBUG=3D1" which
> can be commented out and all of the magic goes away....
It's actually very nice to look at :)
> when we get closer to having production builds be the norm, we'll remove
> that line from the makefile -- and any one wanting a debug build can
> explicitly
> set it on the command line or in an environment variable...
You mean comment it out.. or remove it totally? I'd recommend number 1.
> if you want to leave debug on, but don't want the dumpBuildStrings()
> stuff,
> just #if 0 that section. it's mainly there to provide fodder for a
> translator...
The problem, when Debian Security audited it, they found that temp file
would follow symlinks and allow someone with access to the machine to set
up a DoS-type attack. The fact that it is just debug code is good. =20
--=20
Please cc all mailing list replies to me, also.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
* http://benham.net/index.html <gecko@benham.net> <>< *
* -------------------- * -----------------------------------------------*
* Debian Developer, Debian Project Secretary, Debian Webmaster *
* <gecko@debian.org> <secretary@debian.org> <webmaster@debian.org> *
* <lintian-maint@debian.org> *
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
--9jxsPFA5p3P2qPhR
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GNUPG v0.4.3 (GNU/Linux)
Comment: For info finger gcrypt@ftp.guug.de
iD8DBQE3Alphbbwt//gBAIoRAXfYAKCPBl4C7xKV0aiMKi3lgcYrnN3TCQCbBJEz
pEm5LC9OATv6l2vGoOmvAAE=
=U6Z/
-----END PGP SIGNATURE-----
--9jxsPFA5p3P2qPhR--