On Fri, Mar 15, 2013 at 11:46:10PM -0400, James Turner wrote:
> On Sat, Mar 16, 2013 at 04:30:41AM +0100, Jérémie Courrèges-Anglas wrote:
> > 
> > The opam tarball comes with a ocp-build.boot bytecode file which writes
> > to $HOME, right at the beginning of the build process.
> > ocp-build/README.md says the sources are in TypeRex[1].  After a quick
> > look I don't find a way to generate a fresh ocp-build.  Commenting the
> > first call to ocp-build leads to systrace that prevents curl from
> > calling home.
> > 
> > ''curl --insecure -OL \
> > https://gforge.inria.fr/frs/download.php/31910/cudf-0.6.3.tar.gz''
> > 
> > This doesn't smell good imho. :)
> > 
> > [1] https://github.com/OCamlPro/typerex/
> 
> opam pulls down a few OCaml libraries at build time and then statically
> compiles them into the opam binary, cudf is one of those libraries.
> 
> I didn't notice anything being written to $HOME. I don't normally build
> with systrace (probably should) so I wonder if whatever is written is
> removed farther in the build process.
> 
> I very very new to OCaml so I do appreciate your input!
> 

Oh, just noticed this in directory in /opam-1.0.0_writes_to_HOME which
contains some ocp-build stuff. I'll look into this further.

-- 
James Turner

Reply via email to