https://sourceware.org/bugzilla/show_bug.cgi?id=27784

            Bug ID: 27784
           Summary: debuginfod client-use notification
           Product: elfutils
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: debuginfod
          Assignee: unassigned at sourceware dot org
          Reporter: fche at redhat dot com
                CC: elfutils-devel at sourceware dot org
  Target Milestone: ---

There have been concerns that if debuginfod* client facilities are turned on by
default in a system, a user may have no idea that they are exposing themselves
to the possibility of Bad data flowing down from debuginfod servers.  There was
a suggestion that if we (something?) were to notify users, this could be
enough.

Let's consider extending debuginfod-client.c with a small notification option. 
We probably can't get away with anything interactive in a low level library,
but this simple trick might work:

- upon each request to debuginfod-client, check for existence of a file
$DEBUGINFOD_CACHE/notified_p
- if does not exist, and isatty(stdout), then print a quick notification
message to the user, sleep a second or two, touch that notified_p file, and
continue

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to