Yeah.  The "right thing" is to either:

 - disable the functionality

 - have a per-user exported fasl file dir in their home directory, and
   an easy way for users to add other users they trust to their search
   path

 - have a setuid program that builds fasl files from trusted sources,
   which in practice means download them itself or from .deb packages

My inclination is "disable", and reconsider if someone whines.

                                        --Barak.


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to