]> git.ipfire.org Git - thirdparty/automake.git/commitdiff
* lib/gnupload (GPG): Don't use an absolute path.
authorJim Meyering <meyering@redhat.com>
Tue, 18 Dec 2007 16:49:49 +0000 (17:49 +0100)
committerJim Meyering <meyering@redhat.com>
Tue, 18 Dec 2007 16:50:15 +0000 (17:50 +0100)
This reverts part of the 2004-01-28 change.
If the hypothetical cracker ever gets in to my (or any developer's)
system with sufficient privilege to modify the contents of
directories in my PATH (or change my PATH altogether), they can
already compromise my development work in so many ways that using
such absolute names in gnupload gives reduced functionality with
no added security.

ChangeLog
lib/gnupload

index 191b99db153b5fe124e0628347d6d003c66a1a50..b967dccad0d00d2fdc5a360c5369b573f86510f7 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2007-12-18  Jim Meyering  <meyering@redhat.com>
+
+       * lib/gnupload (GPG): Don't use an absolute path.
+       This reverts part of the 2004-01-28 change.
+
 2007-12-08  Ralf Wildenhues  <Ralf.Wildenhues@gmx.de>
 
        * lib/Automake/FileUtils.pm (open_quote): New function.
index c3a6a4247d91cb5bea326efcf452f2f9c926cb91..2e3c8014c7d14e416dce9d4c1289666986e79e5f 100755 (executable)
@@ -1,7 +1,7 @@
 #!/bin/sh
 # Sign files and upload them.
 
-scriptversion=2007-06-30.12
+scriptversion=2007-12-18.17
 
 # Copyright (C) 2004, 2005, 2006, 2007  Free Software Foundation
 #
@@ -22,7 +22,7 @@ scriptversion=2007-06-30.12
 
 set -e
 
-GPG='/usr/bin/gpg --batch --no-tty'
+GPG='gpg --batch --no-tty'
 to=
 
 usage="Usage: $0 [OPTIONS]... FILES...