diff options
| author | Damien Doligez <damien.doligez@gmail.com> | 2017-06-28 14:02:15 +0200 |
|---|---|---|
| committer | Damien Doligez <damien.doligez@inria.fr> | 2017-06-28 14:08:07 +0200 |
| commit | fee01100fb0664a3b18aa6214b9eb12976c77e99 (patch) | |
| tree | 3e3b5c04ba738b0b91ff17d9f91448685f183e18 /man | |
| parent | c34e24277450e4f5a08b7f338abd09e81ca7b943 (diff) | |
| download | ocaml-fee01100fb0664a3b18aa6214b9eb12976c77e99.tar.gz | |
Some tweaks for MPR#7557 (#1213)
* fall back to __secure_getenv when secure_getenv is not available
* use secure_getenv for instrumented runtimes
* documentation: warn against setting the setuid or setgid bits on custom bytecode executables
Diffstat (limited to 'man')
| -rw-r--r-- | man/ocamlc.m | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/man/ocamlc.m b/man/ocamlc.m index 0888e056b1..2976bfccbb 100644 --- a/man/ocamlc.m +++ b/man/ocamlc.m @@ -315,6 +315,11 @@ Never use the command on executables produced by .BR ocamlc\ \-custom , this would remove the bytecode part of the executable. + +Security warning: never set the "setuid" or "setgid" bits on +executables produced by +.BR ocamlc\ \-custom , +this would make them vulnerable to attacks. .TP .BI \-depend\ ocamldep-args Compute dependencies, as ocamldep would do. |