Re: Does remote caching open up any security vulnerabilities?
Bill Deegan <[email protected]>
| Newsgroups | gmane.comp.programming.tools.scons.user |
|---|---|
| Message-ID | <CAEyG4CFMAWy+yrDfUWM5bsX9HiLYznn2iZT6J8ODkY8dhS0U3w@mail.gmail.com> |
On Thu, Sep 22, 2022 at 12:03 PM Don Baldwin <[email protected]> wrote: > Hi, > > > > What precautions are in place to prevent someone from modifying a cached > file to inject nefarious code into a product? > Currently there are none. If you're building software in such an environment, you have lots of issues to contend with in addition to someone altering the cachedir files. Generally we don't check target file modification either (assuming nothing depends on a given target file as source to another builder). Though in that case it would just case a rebuild of the target which depends on it, not a specific notice that it had been modified. _Bill _______________________________________________ Scons-users mailing list [email protected] https://pairlist4.pair.net/mailman/listinfo/scons-users