[GHC] #9324: GHCi permission checks should ignore root user
#9324: GHCi permission checks should ignore root user -------------------------------------+------------------------------------- Reporter: mboes | Owner: Type: bug | Status: new Priority: normal | Milestone: Component: Compiler | Version: 7.8.2 Keywords: | Differential Revisions: Operating System: POSIX | Architecture: Type of failure: None/Unknown | Unknown/Multiple Test Case: | Difficulty: Unknown Blocking: | Blocked By: | Related Tickets: -------------------------------------+------------------------------------- As a security precaution, GHCi helpfully refuses to run a `.ghci` file if it is owned by another user. But if the that other user is root, then arguably GHCi should not refuse to interpret the file, because if root really was malicious, then the user would be having a bad day anyways. This means that .ghci files installed in a global location, say under `/usr/local/`, can then be read. -- Ticket URL: <http://ghc.haskell.org/trac/ghc/ticket/9324> GHC <http://www.haskell.org/ghc/> The Glasgow Haskell Compiler
#9324: GHCi permission checks should ignore root user -------------------------------------+------------------------------------- Reporter: mboes | Owner: Type: bug | Status: patch Priority: normal | Milestone: Component: Compiler | Version: 7.8.2 Resolution: | Keywords: Differential Revisions: D75 | Operating System: POSIX Architecture: | Type of failure: None/Unknown Unknown/Multiple | Test Case: Difficulty: Unknown | Blocking: Blocked By: | Related Tickets: | -------------------------------------+------------------------------------- Changes (by mboes): * status: new => patch * differential: => D75 -- Ticket URL: <http://ghc.haskell.org/trac/ghc/ticket/9324#comment:1> GHC <http://www.haskell.org/ghc/> The Glasgow Haskell Compiler
#9324: GHCi permission checks should ignore root user -------------------------------------+------------------------------------- Reporter: mboes | Owner: Type: bug | Status: patch Priority: normal | Milestone: Component: Compiler | Version: 7.8.2 Resolution: | Keywords: Differential Revisions: Phab:D75 | Operating System: POSIX Architecture: | Type of failure: None/Unknown Unknown/Multiple | Test Case: Difficulty: Unknown | Blocking: Blocked By: | Related Tickets: | -------------------------------------+------------------------------------- Changes (by mboes): * differential: D75 => Phab:D75 -- Ticket URL: <http://ghc.haskell.org/trac/ghc/ticket/9324#comment:2> GHC <http://www.haskell.org/ghc/> The Glasgow Haskell Compiler
#9324: GHCi permission checks should ignore root user -------------------------------------+------------------------------------- Reporter: mboes | Owner: Type: bug | Status: patch Priority: normal | Milestone: Component: Compiler | Version: 7.8.2 Resolution: | Keywords: Differential Revisions: Phab:D75 | Operating System: POSIX Architecture: | Type of failure: None/Unknown Unknown/Multiple | Test Case: Difficulty: Unknown | Blocking: Blocked By: | Related Tickets: | -------------------------------------+------------------------------------- Comment (by Austin Seipp <austin@…>): In [changeset:"fb936e0db55b0522ddcabd39833c99c7c2871170/ghc"]: {{{ #!CommitTicketReference repository="ghc" revision="fb936e0db55b0522ddcabd39833c99c7c2871170" Make GHCi permissions checks ignore root user. Summary: As a security precaution, GHCi helpfully refuses to run a .ghci file if it is owned by another user. But if the that other user is root, then arguably GHCi should not refuse to interpret the file, because if root really was malicious, then the user would be having a bad day anyways. This means that .ghci files installed in a global location, say under /usr/local/, can now be read. Fixes #9324 Test Plan: ``` $ sudo touch .ghci $ ghci ``` Notice that the warning about the file being owned by someone else is now gone. Reviewers: austin Reviewed By: austin Subscribers: phaskell, simonmar, carter, nomeata, relrod Projects: #ghc Differential Revision: https://phabricator.haskell.org/D75 }}} -- Ticket URL: <http://ghc.haskell.org/trac/ghc/ticket/9324#comment:3> GHC <http://www.haskell.org/ghc/> The Glasgow Haskell Compiler
#9324: GHCi permission checks should ignore root user -------------------------------------+------------------------------------- Reporter: mboes | Owner: Type: bug | Status: closed Priority: normal | Milestone: Component: Compiler | Version: 7.8.2 Resolution: fixed | Keywords: Differential Revisions: Phab:D75 | Operating System: POSIX Architecture: | Type of failure: None/Unknown Unknown/Multiple | Test Case: Difficulty: Unknown | Blocking: Blocked By: | Related Tickets: | -------------------------------------+------------------------------------- Changes (by thoughtpolice): * status: patch => closed * resolution: => fixed Comment: Merged, thanks! -- Ticket URL: <http://ghc.haskell.org/trac/ghc/ticket/9324#comment:4> GHC <http://www.haskell.org/ghc/> The Glasgow Haskell Compiler
#9324: GHCi permission checks should ignore root user -------------------------------------+------------------------------------- Reporter: mboes | Owner: Type: bug | Status: closed Priority: normal | Milestone: 7.10.1 Component: Compiler | Version: 7.8.2 Resolution: fixed | Keywords: Differential Revisions: Phab:D75 | Operating System: POSIX Architecture: | Type of failure: None/Unknown Unknown/Multiple | Test Case: Difficulty: Unknown | Blocking: Blocked By: | Related Tickets: | -------------------------------------+------------------------------------- Changes (by thoughtpolice): * milestone: => 7.10.1 -- Ticket URL: <http://ghc.haskell.org/trac/ghc/ticket/9324#comment:5> GHC <http://www.haskell.org/ghc/> The Glasgow Haskell Compiler
participants (1)
-
GHC