GHC Trac Home
GHC Git Repos
Report a bug
Mailing Lists & IRC
The GHC Team
GHC Status Info
Tickets I Created
Patches for review
New Feature Req
side by side
lines around each change
Show the changes in full context
White space changes
Jan 18, 2011 12:04:31 PM (
== Trusted modules ==
'''SLPJ/SDM note'''. This is an attempt to define what it means for a module, or a package, to be "trusted", and what consequences that trust has. If successful it would replace the material that follows
* A '''client''' is someone running GHC, typically the person compiling the application.
* A '''package P is trusted by a client C''' iff one of these conditions hold
* C's package database records that P is trusted
* C's command-line flags say to trust it regardless (see `-trust`, `-distrust` below)[[BR]]
It is up to C to decide what packages to trust; it is not a property of P.
* A '''module M from package P is trusted by a client C''' iff
* Package P is trusted by C
* One of the following holds:
* The module was compiled with `-XSafe` and all of M's direct `imports` are trusted by C
* The module was compiled with `-XTrustworthy` and all of M's direct `safe imports` are trusted by C
* When a client C compiles a module M with
* `-XSafe`: all M's `imports` must be trusted by C
* `-XTrustworthy`: all M's `safe imports` must be trusted by C[[BR]]
Otherwise the module is rejected.
'''End of SLPJ/SDM note'''
Recall that a safe import of a module M fails unless M is trusted. Whether or not M is trusted depends on the following factors: