#6017: Reading ./.ghci files raises security issues -------------------------------------+------------------------------------ Reporter: nomeata | Owner: Type: task | Status: new Priority: high | Milestone: 7.8.1 Component: GHCi | Version: 7.4.1 Resolution: | Keywords: Operating System: Unknown/Multiple | Architecture: Unknown/Multiple Type of failure: Other | Difficulty: Unknown Test Case: | Blocked By: Blocking: | Related Tickets: -------------------------------------+------------------------------------ Comment (by Simon Marlow ): In [changeset:"a6f2c852d49313fa8acea2deb3741ab86c6ef995/ghc"]: {{{ #!CommitTicketReference repository="ghc" revision="a6f2c852d49313fa8acea2deb3741ab86c6ef995" Don't perform permission checks for scripts named with -ghci-script (#6017) The user explicitly requested this script on the command-line, so it's unnecessary to require that the script is also owned by the user. Also, it is currently impossible to make a GHCi wrapper that invokes a custom script without first making a copy of the script to circumvent the permissions check, which seems wrong. }}} -- Ticket URL: http://ghc.haskell.org/trac/ghc/ticket/6017#comment:10 GHC http://www.haskell.org/ghc/ The Glasgow Haskell Compiler