Re: gtk+-1.2.10

[Ben Gertzfield <che debian org>]

>>>>> "Owen" == Owen Taylor <otaylor redhat com> writes:

    Owen> Please just fix your application. In the quick look I took
    Owen> GTK+ frontend is only 7000 lines or so, with a strong
    Owen> separation between that and the core. Splitting that apart
    Owen> into a separate process is simply not that hard.

Well, it's not that hard for a new application, but it's really hard
for something historical like Gnomehack, (based on Nethack) which
needs the ability to open files at any point during the game (if you
die, it may randomly decide to save your file as a "bones" file for
other players to come across) in the save directory.

If it can't be run sgid, it can't do this; re-architecturing this
would most likely entail removing this feature entirely, or like
you said, forking off a process and introducing a nightmare of new
problems to debug.

But I understand completely why GTK+ is not secure, that point I'm not
arguing.  I'm just saying it's not trivial to fix these kinds of
engineering decisions made 15-20 years ago (literally!)

Ben

-- 
Brought to you by the letters R and F and the number 3.
"Well, I think Perl should run faster than C.  :-)"
Debian GNU/Linux maintainer of Gimp and GTK+ -- http://www.debian.org/