DEV Community

Discussion on: Safer set-uid programs in Ada with the suid-helper library

Collapse
 
ferruck profile image
Philipp Trommler

Thanks for sharing, seems like a library that could come in handy sometimes. Just two questions/remarks:

  1. Why don't you initialize the user environment with the tainted environment? I get your point that you want to favour a controlled usage of the provided variables but it seems like this virtually provokes the creation of programs that don't honor user-set environment variables even where they're safe to use...
  2. Have you already published your library to Alire? ;-)
Collapse
 
pinotattari profile image
Riccardo Bernardini
  1. Good question. Honestly I was unsure between the two versions, then I decided for this one that forces you to import what you really need. But it was quite a tie.

  2. No, not yet :-) Were you at FOSDEM, too?

Collapse
 
ferruck profile image
Philipp Trommler
  1. Yes, I got that. Still I think that it'll lead to "misbehaving" (in the sense of unexpected) programs. No offense, just my two pence...
  2. Yes, indeed, and I saw your talk! 😉