Re: deploying CLG

"Walter C. Pelissero" <[email protected]> Mon, 17 Dec 2007 13:02:16 +0100
Newsgroups gmane.lisp.clg.devel
Message-ID <[email protected]>
I've given a cursory look at the code and I've noticed that you meant
to try first the non-absolute pathname and then the absolute.  I
initially understood you intended to do the other way around.  This,
of course, reduces substantially the security risk as I saw it.

It does however raise some doubts about the usefulness of the absolute
pathnames.  In fact, if I'm trying to debug a C library (not
necessarily CLG's) that is both already installed under, say,
/usr/local/lib and in /home/me/my_sandbox/, I'll have to resort to
setting LD_LIBRARY_PATH in any case to load my private one, or install
it under /usr/local/lib each time I debug it (which might not me an
option where the production machine is shared with developers).  Just
like for a C program.  The abosulte pathnames would thus be used only
on machines where the program is never installed.


A minor observation.  I believe ABSOLUTE-NAMESTRING-P and
NAMESTRING-FILENAME would not work under Windoze.  Perhaps something
like this?

(defun absolute-pathname-p (pathname)
  (eq :absolute (car (pathname-directory (pathname pathname)))))

s/namestring-filename/file-namestring/g

[AFAIK the call to pathname is actually superfluos.]

-- 
walter pelissero
http://www.pelissero.de

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace