On Thu, Mar 15, 2012 at 12:45 AM, David Chan <[email protected]> wrote: >> > The >> > selfhost issue Jonas brought up doesn't seem to apply if the >> > packages >> > are signed. >> >> self-host... selfhost... i'm lost. sorry. do you have a reference >> (wiki URL) which explains? >> > > The scenario is more complicated than I remember.
... ah :) good job there's other people out there, eh? :) anyone else recall ... or was it part of the usr/local stuff i wrote about? hmmm... 1sec lemme cut/paste some of that and summarise... ok: https://wiki.mozilla.org/Apps/Security#Other_.28topics_that_don.27t_fall_into_above_proposals.29 i just added the bit about /usr and /usr/local to this section. also i'd added the bit about "eval()" which i'd seen whizzing by a few days ago, don't want to lose track of that idea. l. _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
