The *only* reason for inclusion of "modules/.libs" is facilitating
developement. It could easily be (de)activated with an #ifdef.

Bernard Johnson wrote:
> Isn't it a little of a security concern that dbmail-* loads code from
> relative paths?  I guess that I wouldn't be too concerned about imapd,
> pop3d, lmtpd, or timsieved, since I more or less never run them except
> via init scripts, so the working directory is set everytime.
> 
> But for something like dbmail-util or dbmail-users, what if someone
> managed to plant a .so in the current working directory or in
> modules/.libs under the current working directory.
> 
> Since NULL is the last to be searched, I guess it's not too much of a
> concern either, since I expect to always have PREFIX/lib/dbmail
> installed if I'm running these utilities.
> 
> But what about the possibility of loading from modules/.libs???
> 
> File: dbmodule.c
> /* Try local build area, then dbmail lib paths, then system lib path. */
> int i;
> char *lib_path[] = {
>         "modules/.libs",
>         PREFIX "/lib/dbmail",
>         NULL };
> /* Note that the limit here *includes* the NULL. This is intentional,
>  * to allow g_module_build_path to try the current working directory. */
> 
> _______________________________________________
> Dbmail-dev mailing list
> [email protected]
> http://twister.fastxs.net/mailman/listinfo/dbmail-dev
> 

-- 
  ________________________________________________________________
  Paul Stevens                                      paul at nfg.nl
  NET FACILITIES GROUP                     GPG/PGP: 1024D/11F8CD31
  The Netherlands________________________________http://www.nfg.nl
_______________________________________________
Dbmail-dev mailing list
[email protected]
http://twister.fastxs.net/mailman/listinfo/dbmail-dev

Reply via email to