[Bf-committers] Installation/file paths

Kevin Roy kiniou at gmail.com
Wed May 12 12:30:51 CEST 2010


GSR wrote, On 12/05/2010 02:23:
> That is a distro workaround to fix a Blender vulnerability (classical
> symlink attack).

Yes maybe (I'm no security expert) ... but do you mean Blender should 
not adopt this workaround on unix-like system? This is what both the 
proposal and the debian package suggest on this platform (I haven't any 
suggestions about OSX and Windows).

As I read your previous emails, you are not in favor with temporary 
files located in $HOME directory because of networked user directory 
setups. I think those setups are usually managed by some sysadmin ( or 
crasy geek user :D ) and therefore Blender should be deployed and 
configured by them with environment variables or system-wide config files.

---
Kevin Roy
http://blog.knokorpo.fr


More information about the Bf-committers mailing list