Subject: Re: [acf] Re: [alpine-devel] Ideas for a new config framework, ACF2
References: <20121129152317.69585a4f@ncopa-desktop.alpinelinux.org> <C4453D93-B8C1-40E9-8DE2-21C595C9F6D1@yahoo.com> <20121130145203.750ed4d3@ncopa-desktop.alpinelinux.org>
From: Ted Trask <ttrask01@yahoo.com>
Content-Type: text/plain;
	charset=us-ascii
In-Reply-To: <20121130145203.750ed4d3@ncopa-desktop.alpinelinux.org>
Message-Id: <AEA81C18-78D7-4209-A584-DCF9055978A1@yahoo.com>
Date: Fri, 11 Jan 2013 09:32:57 -0500
To: Alpine ACF <acf@lists.alpinelinux.org>,
 Alpine Developers <alpine-devel@lists.alpinelinux.org>
Content-Transfer-Encoding: quoted-printable
Precedence: list
Mime-Version: 1.0 (1.0)

On Nov 30, 2012, at 8:52 AM, Natanael Copa <ncopa@alpinelinux.org> wrote:

-snip-

> * Lots of use of popen. This can go horrible wrong unless you take
>  great care and know exactly what you are doing (I know you do but I
>  consider this liek playing with fire).
>=20

-snip-

> * get rid of and forbid popen completely.

I have just finished removing all instances of io.popen calls from ACF. ACF i=
s now using a library called lua-subprocess. These changes have been backpor=
ted to Alpine Linux 2.5.

I will continue to work to improve the security and design of ACF. Thank you=
 for your comments.

Ted


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---