#3910: +RTS options introduce a security problem for, e.g., setuid binaries
------------------------------------------+---------------------------------
Reporter: andersk | Owner: simonmar
Type: bug | Status: closed
Priority: normal | Milestone: 7.0.2
Component: Runtime System | Version: 7.1
Resolution: fixed | Keywords:
Testcase: | Blockedby:
Difficulty: | Os: Unknown/Multiple
Blocking: | Architecture: Unknown/Multiple
Failure: Incorrect result at runtime |
------------------------------------------+---------------------------------
Comment(by simonmar):
I resent the fact that the broken CGI spec forced the pain of `-rtsopts`
onto everyone, but we're stuck with it. Unfortunately most of the RTS
options are "insecure" in some sense, whether it is by leaking
information, DOS, or writing files.
Just alias `ghc` to `ghc -rtsopts` in your shell, that's what I do.
--
Ticket URL: <http://hackage.haskell.org/trac/ghc/ticket/3910#comment:11>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler
_______________________________________________
Glasgow-haskell-bugs mailing list
[email protected]
http://www.haskell.org/mailman/listinfo/glasgow-haskell-bugs
