chicken-hackers
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Chicken-hackers] Re: [Chicken-users] .meta needs on a per platform basi


From: Kon Lovett
Subject: [Chicken-hackers] Re: [Chicken-users] .meta needs on a per platform basis
Date: Tue, 9 Jan 2007 08:53:40 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Jan 8, 2007, at 10:47 PM, felix winkelmann wrote:


<snip>

Hm... I'd prefer not to generate stubs.

I wasn't serious.


Actually, I'd like to extend "needs" even more: every non-symbolic
requirement (extension-id) may alternatively be an expressions
that should return a list of extension-ids. That way we can use
`cond-expand' or even perform platform-specific tests whether
certain software is installed.

Yes.


This opens up the possibilty for eggs containing 3rd-party libraries
(i.e. bb.meta contains a needs clause that checks fot an installed
fltk, if it isn't require an egg containing the fltk tarball and build
instructions).

Would be nice.


The downside is that this may be a security problem: the code in
the needs clause will be executed by chicken-setup, even if the
user doesn't request an actual installation (which would run the .setup
script, which of course can do all sorts of things and may even be run
as root).

Root will require user connivance. But a malicious egg could do some damage to user areas. Posting is password protected but the password has been distributed on an open channel in the past so ...



cheers,
felix

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iEYEARECAAYFAkWjyJQACgkQJJNoeGe+5O699QCdGnQeSW4T/DSkWGb8Q4aZOeIP
d4AAnRUma1b0e2NjOk7dzgmvhgTzw5wA
=6qGs
-----END PGP SIGNATURE-----




reply via email to

[Prev in Thread] Current Thread [Next in Thread]