Re: [Gnash-commit] gnash configure.ac ChangeLog

[strk]

On Wed, Dec 26, 2007 at 01:11:08AM +0000, Rob Savoye wrote:

> +# These settings are compile time options for the security
> +# setting for anything that lets gnash exchange data with
> +# other applications. Currently this only supports Shared
> +# Objects and Local Connections. Shared Objects are like
> +# your web browsers cookies, and Local Connections use
> +# shared memory to execute methods remotely, and to
> +# exchange data.

Note that loadMovie*, getURL, MovieClipLoader, XML, XMLSocket,
LoadVars ... all can be used to exchange data with other applications.

An --{enable,disable}-security option seems confusing to me.

Also, we want the runtime to know about what is not working and
what not due to security issues.
Things like:

         SECURITY: SharedObject support was not compiled int
         SECURITY: SharedObject support disabled by rc file
         SECURITY: read of SharedObject <path> granted (<why>)
         SECURITY: read of SharedObject <path> forbidden (<why>)

         SECURITY: LocalConnection support was not compiled int
         SECURITY: LocalConnection support disabled by rc file
         SECURITY: LocalConnection to <shm> granted (<why>)
         SECURITY: LocalConnection to <shm> forbidden (<why>)

--strk;