Re: "make test" for lwp 0.04 fails on last test

Gisle Aas (aas@oslonett.no)
Mon, 11 Sep 1995 09:12:11 +0200


Roy Fielding writes:
> >Can you track down what fails for you?  This test tries to copy the 
> >/etc/passwd file to /usr/tmp using the getprint() and getstore() functions.  
> >Is /etc/passwd read protected?  Are there problems writing to /usr/tmp?  Is 
> >there a problem in the library?
> 
> Yikes!  Please tell me you are joking here.  I would ban the software
> on principle alone for even thinking about copying /etc/passwd.
> Please change it to something that won't raise the hair on the back
> of any security person's neck (i.e., the README file that comes with
> the distribution is a far more appropriate target).

I am not joking.  I don't see how this is soooo bad.  I did not use any files 
from the distribution because I needed an absolute file name to start with.  
Ealier versions of LWP used /etc/motd, but I changed it to /etc/passwd because 
I thought it to be more likely to be found on many systems.

Since you (and probably others) are so upset about this, I will change this 
for the next release.  I will probably generate a test file in the /usr/tmp 
directory and let the test GETing it.

--Gisle