1. Linux broken + security risk

Installed a brand new installation of Euphoria 2.5 on Debian (Sarge).
All attempts to execute Euphoria generate the following:

/usr/local/euphoria/bin# ./exu
Error opening terminal: xterm.

Exactly how to I debug this?  The previous version of Euphoria worked
properly.


Also, over a year ago I sent a private mail to the developers pointing out
that their default Linux install leaves many of the files world-writable,
files which are later executed.  This is a major security risk.  The response
was "Thanks, I'll try to keep that in mind for the next release".

Guess they forgot.  Maybe a more public posting will help.

new topic     » topic index » view message » categorize

2. Re: Linux broken + security risk

Neil Fraser wrote:
> 
> Installed a brand new installation of Euphoria 2.5 on Debian (Sarge).
> All attempts to execute Euphoria generate the following:
> 
> /usr/local/euphoria/bin# ./exu
> Error opening terminal: xterm.
> 
> Exactly how to I debug this?  The previous version of Euphoria worked
> properly.
> 
> 
> Also, over a year ago I sent a private mail to the developers pointing out
> that their default Linux install leaves many of the files world-writable,
> files which are later executed.  This is a major security risk.  The response
> was "Thanks, I'll try to keep that in mind for the next release".
> 
> Guess they forgot.  Maybe a more public posting will help.
> 


In your .bashrc put in this line:

export TERM=ansi

Matt Lewis

new topic     » goto parent     » topic index » view message » categorize

3. Re: Linux broken + security risk

Neil Fraser wrote:
> Also, over a year ago I sent a private mail to the developers pointing out
> that their default Linux install leaves many of the files world-writable,
> files which are later executed.  This is a major security risk.  The response
> was "Thanks, I'll try to keep that in mind for the next release".
> 
> Guess they forgot.  Maybe a more public posting will help.

Thanks, I'll try to keep that in mind for the next release.  smile

Regards,
   Rob Craig
   Rapid Deployment Software
   http://www.RapidEuphoria.com

new topic     » goto parent     » topic index » view message » categorize

4. Re: Linux broken + security risk

Matt Lewis wrote:
> In your .bashrc put in this line:
> export TERM=ansi

Thanks.  That works.

Robert Craig wrote:
> Thanks, I'll try to keep that in mind for the next release.  smile

I'll be watching.  smile


Now if only there was a way to specify where the library files are
without using environment variables.  Apache doesn't have a clue
when executing a Euphoria CGI, so I've had to edit every file in
the library to say things like:
include /usr/local/euphoria/include/sort.e
include /usr/local/euphoria/include/misc.e

Most applications either use a configuration file at a known location
(e.g. euphoria.cfg in the same directory as exu) or else they build
the library paths into the executable when the source code is
configured prior to compiling (not an option here if Euphoria comes
precompiled).

new topic     » goto parent     » topic index » view message » categorize

5. Re: Linux broken + security risk

> Most applications either use a configuration file at a known location
> (e.g. euphoria.cfg in the same directory as exu) or else they build
> the library paths into the executable when the source code is
> configured prior to compiling (not an option here if Euphoria comes
> precompiled).
> 

Well, if we are going to start talking about config options, I would 
also like to see a an eu.cfg file.  As far as I can tell, it would 
really only need to be at most a few lines long.

EUDIR=/path/to/euphoria  -- probably not needed since exu is already running
EUINC=/path/to/euphoria/includes  
EULIB=/path/to/euphoria/lib  -- for so/dll files

 


simple and no more environment variables need...  :)

new topic     » goto parent     » topic index » view message » categorize

6. Re: Linux broken + security risk

Neil Fraser wrote:
> posted by: Neil Fraser <euphoria at neil.fraser.name>
> 
> Matt Lewis wrote:
> 
>>In your .bashrc put in this line:
>>export TERM=ansi
> 
> 
> Thanks.  That works.
> 
> Robert Craig wrote:
> 
>>Thanks, I'll try to keep that in mind for the next release.  smile
> 
> 
> I'll be watching.  smile
> 
> 
> Now if only there was a way to specify where the library files are
> without using environment variables.  Apache doesn't have a clue
> when executing a Euphoria CGI, so I've had to edit every file in
> the library to say things like:
> }}}
<eucode>
> include /usr/local/euphoria/include/sort.e
> include /usr/local/euphoria/include/misc.e
> </eucode>
{{{

> Most applications either use a configuration file at a known location
> (e.g. euphoria.cfg in the same directory as exu) or else they build
> the library paths into the executable when the source code is
> configured prior to compiling (not an option here if Euphoria comes
> precompiled).

Most GUI programs use a config file, but I think that most language 
interpreters/compilers still use environment variables.  Actually, I 
think a lot of programs use both, and that might be a good idea.

Of course, I don't have any idea about CGI programs.

-- 
==============================
Too many freaks, not enough circuses.
j.

new topic     » goto parent     » topic index » view message » categorize

7. Re: Linux broken + security risk

Neil Fraser wrote:

> Now if only there was a way to specify where the library files are
> without using environment variables.  Apache doesn't have a clue
> when executing a Euphoria CGI, so I've had to edit every file in
> the library to say things like:
> }}}
<eucode>
> include /usr/local/euphoria/include/sort.e
> include /usr/local/euphoria/include/misc.e
> <font color="#330033"></eucode>
{{{
</font>
> Most applications either use a configuration file at a known location
> (e.g. euphoria.cfg in the same directory as exu) or else they build
> the library paths into the executable when the source code is
> configured prior to compiling (not an option here if Euphoria comes
> precompiled).

In Apache's Configuration, you can specify Enviroment Variables to pass
along to CGI Scripts.

<IfModule mod_env.c>
    PassEnv EUDIR EUINC
</IfModule>

-or-

<IfModule mod_env.c>
    SetEnv EUDIR /home/eumario/euphoria
    SetEnv EUINC /home/eumario/lib
</IfModule>

Mario Steele
http://enchantedblade.trilake.net
Attaining World Dominiation, one byte at a time...

new topic     » goto parent     » topic index » view message » categorize

Search



Quick Links

User menu

Not signed in.

Misc Menu