inxi: new version (perl based)

Forum Forums General Software inxi: new version (perl based)

  • This topic has 2 replies, 2 voices, and was last updated Mar 21-2:48 pm by anticapitalista.
Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #8076
    Anonymous

      While betatesting, roky discovered a problem with new version of the script.
      An antiX user’s sudo -permissioned inxi instance will write a root-permissioned conf file under user’s $HOME
      https://www.linuxquestions.org/questions/slackware-14/beta-testers-for-perl-inxi-requested-4175625577/page4.html#post5833309

      By opening a terminal and typing
      sudo env
      we can see that $XDG_CONFIG_HOME is not set

      from the new inxi version manpage:

      /etc/inxi.conf is the default configurations. These can be overridden by user configurations found in one of the following locations
      (inxi will place its config file using the following precedence as well, that is, if $XDG_CONFIG_HOME is not empty, it will go there, else if
      $HOME/.conf/inxi.conf exists, it will go there, and as a last default, the legacy location is used:

      $XDG_CONFIG_HOME/inxi.conf
      or
      $HOME/.conf/inxi.conf
      or
      $HOME/.inxi/inxi.conf

      In the antiX sudo shell environment, $HOME=/root is set.
      If the package “smxi-inxi-antix” installed a /root/.conf/inxi.conf file (even just a zero-length placeholder file), maybe that would prevent the problem that roky encountered?

      .
      Hope the above will fix. I’m anxious about the potential side-effects from exporting $XDG_CONFIG_HOME for sudo user

      #8077
      Anonymous
        Helpful
        Up
        0
        ::

        As a security consideration, IMO “smxi-inxi-antix” package should install a /etc/inxi.conf declaring
        B_ALLOW_UPDATE=’false’
        ^—– autoupdate would fetch via curl|wget

        @anticapitalista
        I’ve sent a “smxi-inxi-antix” pull request which (untested) applies these changes.

        #8078
        Forum Admin
        anticapitalista
          Helpful
          Up
          0
          ::

          Thanks skidoo – changes will be in uploaded new deb.

          Philosophers have interpreted the world in many ways; the point is to change it.

          antiX with runit - leaner and meaner.

        Viewing 3 posts - 1 through 3 (of 3 total)
        • You must be logged in to reply to this topic.