#5690: Enable RTS opts by default with security warning
------------------------------+---------------------------------------------
 Reporter:  EyalLotem         |          Owner:                  
     Type:  feature request   |         Status:  new             
 Priority:  normal            |      Component:  Compiler        
  Version:  7.2.1             |       Keywords:                  
       Os:  Unknown/Multiple  |   Architecture:  Unknown/Multiple
  Failure:  None/Unknown      |       Testcase:                  
Blockedby:                    |       Blocking:                  
  Related:                    |  
------------------------------+---------------------------------------------
 RTS options have security problems. However, disabling them has a lot of
 downsides.

 I propose enabling them by default, with a message like:

 "Warning: RTS options are enabled. This has the security implications
 explained by http://.... To disable RTS options, use -disable-rtsopts. To
 suppress this warning, use -enable-rtsopts."

 This would allow everyone to ignore the warning while in development, or
 explicitly enable rts opts as they do now.  Security-minded projects will
 not be likely to forget to disable the RTS opts given this warning.

-- 
Ticket URL: <http://hackage.haskell.org/trac/ghc/ticket/5690>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler

_______________________________________________
Glasgow-haskell-bugs mailing list
[email protected]
http://www.haskell.org/mailman/listinfo/glasgow-haskell-bugs

Reply via email to