inxi: new version (perl based)

Forum Forums General Software inxi: new version (perl based)

  • This topic has 2 replies, 2 voices, and was last updated Mar 21-2:48 pm by anticapitalista.
Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #8076
    Member
    Avatarskidoo

    While betatesting, roky discovered a problem with new version of the script.
    An antiX user’s sudo -permissioned inxi instance will write a root-permissioned conf file under user’s $HOME
    https://www.linuxquestions.org/questions/slackware-14/beta-testers-for-perl-inxi-requested-4175625577/page4.html#post5833309

    By opening a terminal and typing
    sudo env
    we can see that $XDG_CONFIG_HOME is not set

    from the new inxi version manpage:

    /etc/inxi.conf is the default configurations. These can be overridden by user configurations found in one of the following locations
    (inxi will place its config file using the following precedence as well, that is, if $XDG_CONFIG_HOME is not empty, it will go there, else if
    $HOME/.conf/inxi.conf exists, it will go there, and as a last default, the legacy location is used:

    $XDG_CONFIG_HOME/inxi.conf
    or
    $HOME/.conf/inxi.conf
    or
    $HOME/.inxi/inxi.conf

    In the antiX sudo shell environment, $HOME=/root is set.
    If the package “smxi-inxi-antix” installed a /root/.conf/inxi.conf file (even just a zero-length placeholder file), maybe that would prevent the problem that roky encountered?

    .
    Hope the above will fix. I’m anxious about the potential side-effects from exporting $XDG_CONFIG_HOME for sudo user

    #8077
    Member
    Avatarskidoo

    As a security consideration, IMO “smxi-inxi-antix” package should install a /etc/inxi.conf declaring
    B_ALLOW_UPDATE=’false’
    ^—– autoupdate would fetch via curl|wget

    @anticapitalista
    I’ve sent a “smxi-inxi-antix” pull request which (untested) applies these changes.

    #8078
    Forum Admin
    anticapitalistaanticapitalista

    Thanks skidoo – changes will be in uploaded new deb.

    Philosophers have interpreted the world in many ways; the point is to change it.

Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.