| commit | 6130d102ef0c70a60c231bceefc5a40a8908ade0 | |
| author | Jim Meyering <meyering@redhat.com> | |
| Tue, 18 Dec 2007 16:49:49 +0000 (18 17:49 +0100) | ||
| committer | Jim Meyering <meyering@redhat.com> | |
| Tue, 18 Dec 2007 16:50:15 +0000 (18 17:50 +0100) | ||
| tree | e8fe0bfb80d64dd91b773fb066a68cfb6ece3fb2 | treesnapshot (tar.gz zip) |
| parent | 0ceb06bf5497507cd772b3018a92c106deecf808 | commitdiff |
* lib/gnupload (GPG): Don't use an absolute path.
This reverts part of the 2004-01-28 change.
If the hypothetical cracker ever gets in to my (or any developer's)
system with sufficient privilege to modify the contents of
directories in my PATH (or change my PATH altogether), they can
already compromise my development work in so many ways that using
such absolute names in gnupload gives reduced functionality with
no added security.
This reverts part of the 2004-01-28 change.
If the hypothetical cracker ever gets in to my (or any developer's)
system with sufficient privilege to modify the contents of
directories in my PATH (or change my PATH altogether), they can
already compromise my development work in so many ways that using
such absolute names in gnupload gives reduced functionality with
no added security.
| ChangeLog | diffblobblamehistory | |
| lib/gnupload | diffblobblamehistory |