diff options
author | ulfvonbelow <striness@tilde.club> | 2023-02-02 19:29:52 +0000 |
---|---|---|
committer | Dale Mellor <mcron-lsfnyl@rdmp.org> | 2023-03-18 14:00:26 +0000 |
commit | 4727c770c2a723d46b4162cff21ab8f0b75c3998 (patch) | |
tree | 5cdd3a6c110d60d96892032b05edb60f0a77271c /environment.scm | |
parent | 2ff4d0f44ec21332d13de8d8ab8c39c77450ff7d (diff) | |
download | mcron-4727c770c2a723d46b4162cff21ab8f0b75c3998.tar.gz mcron-4727c770c2a723d46b4162cff21ab8f0b75c3998.tar.bz2 mcron-4727c770c2a723d46b4162cff21ab8f0b75c3998.zip |
crontab-access: replace with wrapper, rename to crontab-access-real.
The wrapper has two purposes:
1. Not being a script, thereby eliminating the issues with setuid scripts.
2. Purging the environment. crontab-access-real has no need for any
environment variables to do its work, so to prevent tampering with dynamic
linker, libc, or guile, we may as well just unset them all.
This wrapper does introduce a requirement for a C compiler. Ideally it would
be conditional based on whether the wrapper is even going to be built, but
autoconf doesn't like that one bit. Someone with more experience with
autotools should sort that out. In the meantime I guess anyone wanting to
build without a C compiler being present is going to have to edit configure.ac
and re-run bootstrap.
* src/crontab-access.in: renamed to src/crontab-access-real.in
* src/crontab-access.c.in: new file, wrapper for crontab-access-real.
* Makefile.am: inform about crontab-access.c.in and name change to
crontab-access-real. Put crontab-access-real in libexecdir.
Diffstat (limited to 'environment.scm')
0 files changed, 0 insertions, 0 deletions