Enable RTS opts by default with security warning
RTS options have security problems. However, disabling them has a lot of downsides.
I propose enabling them by default, with a message like:
"Warning: RTS options are enabled. This has the security implications explained by http://.... To disable RTS options, use -disable-rtsopts. To suppress this warning, use -enable-rtsopts."
This would allow everyone to ignore the warning while in development, or explicitly enable rts opts as they do now. Security-minded projects will not be likely to forget to disable the RTS opts given this warning.
Trac metadata
Trac field | Value |
---|---|
Version | 7.2.1 |
Type | FeatureRequest |
TypeOfFailure | OtherFailure |
Priority | normal |
Resolution | Unresolved |
Component | Compiler |
Test case | |
Differential revisions | |
BlockedBy | |
Related | |
Blocking | |
CC | |
Operating system | |
Architecture |