Re: Does remote caching open up any security vulnerabilities?

Thanks for the quick response Bill.  When you say we’ll have “lots of issues to contend with”, what exactly are you referring to?  Is Remote Caching generally thought to be more of a headache than it’s worth?

Thanks,
Don


From: Scons-users <[email protected]> On Behalf Of Bill Deegan
Sent: Thursday, September 22, 2022 12:15 PM
To: SCons users mailing list <[email protected]>
Subject: Re: [Scons-users] Does remote caching open up any security vulnerabilities?


WARNING: This email originated from outside of Qualcomm. Please be wary of any links or attachments, and do not enable macros.


On Thu, Sep 22, 2022 at 12:03 PM Don Baldwin <[email protected]<mailto:[email protected]>> wrote:
Hi,

What precautions are in place to prevent someone from modifying a cached file to inject nefarious code into a product?

Currently there are none.
If you're building software in such an environment, you have lots of issues to contend with in addition to someone altering the cachedir files.

Generally we don't check target file modification either (assuming nothing depends on a given target file as source to another builder).
Though in that case it would just case a rebuild of the target which depends on it, not a specific notice that it had been modified.

_Bill

_______________________________________________
Scons-users mailing list
[email protected]
https://pairlist4.pair.net/mailman/listinfo/scons-users