POV-Ray : Newsgroups : povray.bugreports : povray.conf contains evil directory Server Time: 23 Oct 2019 03:21:53 GMT
  povray.conf contains evil directory (Message 1 to 8 of 8)  
From: Dick Balaska
Subject: povray.conf contains evil directory
Date: 10 Oct 2019 06:30:26
Message: <5d9ed002$1@news.povray.org>
Line 94 of the default unix povray.conf contains a reference to
%INSTALL_DIR%/../../etc

https://github.com/POV-Ray/povray/blob/master/unix/povray.conf

This is the exact unix directory we *don't* want povray to read.

This line should be removed.
-- 
dik
Rendered 1024 of 2073600 pixels (0%)


Post a reply to this message

From: William F Pokorny
Subject: Re: povray.conf contains evil directory
Date: 11 Oct 2019 08:13:33
Message: <5da039ad$1@news.povray.org>
On 10/10/19 2:30 AM, Dick Balaska wrote:
> Line 94 of the default unix povray.conf contains a reference to
> %INSTALL_DIR%/../../etc
> 
> https://github.com/POV-Ray/povray/blob/master/unix/povray.conf
> 
> This is the exact unix directory we *don't* want povray to read.
> 
> This line should be removed.

On my Ubuntu system this resolves to /usr/local/etc for an actual system 
install - which is OK I think. It's where the system wide povray.conf 
and povray.ini files are installed and these I believe set the file i/o 
access rights all users picking up the common install would get.

Am I missing something?

On your system are you ending up with /etc readable due a different tool 
install directory structure, or?

Bill P.


Post a reply to this message

From: Dick Balaska
Subject: Re: povray.conf contains evil directory
Date: 11 Oct 2019 10:29:38
Message: <5da05992$1@news.povray.org>
On 10/11/19 4:13 AM, William F Pokorny wrote:
> On 10/10/19 2:30 AM, Dick Balaska wrote:
>> Line 94 of the default unix povray.conf contains a reference to
>> %INSTALL_DIR%/../../etc
>>
>> https://github.com/POV-Ray/povray/blob/master/unix/povray.conf
>>
>> This is the exact unix directory we *don't* want povray to read.
>>
>> This line should be removed.
> 
> On my Ubuntu system this resolves to /usr/local/etc for an actual system 
> install - which is OK I think. It's where the system wide povray.conf 
> and povray.ini files are installed and these I believe set the file i/o 
> access rights all users picking up the common install would get.
> 
> Am I missing something?
> 
> On your system are you ending up with /etc readable due a different tool 
> install directory structure, or?
> 
> Bill P.

For me, on debian/ubuntu/mint, povray/qtpovray ends up at
/usr/share/povray-3.7
/usr/share/qtpovray-3.8


so the evil dir is
/usr/etc
which does not exist.

Technically, the evil dir is undefined.
I still submit that there is no legitimate reason to ever access 
%INSTALL_DIR%/../anything
especially etc, which just makes it an incompetent evil.

-- 
dik
Rendered 95232 of 2073600 pixels (22%)


Post a reply to this message

From: jr
Subject: Re: povray.conf contains evil directory
Date: 11 Oct 2019 11:25:00
Message: <web.5da065e9783a8ea6feeb22ff0@news.povray.org>
hi,

Dick Balaska <dic### [at] buckosoftcom> wrote:
> ...
> For me, on debian/ubuntu/mint, povray/qtpovray ends up at
> /usr/share/povray-3.7
> /usr/share/qtpovray-3.8

weird.  neither is "system" software, so should go under '/usr/local' (or
'/opt'), aiui.


regards, jr.


Post a reply to this message

From: Dick Balaska
Subject: Re: povray.conf contains evil directory
Date: 11 Oct 2019 12:49:18
Message: <5da07a4e$1@news.povray.org>
On 10/11/19 7:22 AM, jr wrote:
> hi,
> 
> Dick Balaska <dic### [at] buckosoftcom> wrote:
>> ...
>> For me, on debian/ubuntu/mint, povray/qtpovray ends up at
>> /usr/share/povray-3.7
>> /usr/share/qtpovray-3.8
> 
> weird.  neither is "system" software, so should go under '/usr/local' (or
> '/opt'), aiui.
> 
> 
> regards, jr.
> 
> 

/usr/share: Architecture-independent (shared) data.
https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard

I have 351 directories of foo under /usr/share

/usr/local is for stuff I build myself.  I didn't, I installed the 
"official" debian package.

/opt is for optional.   Good for whole self contained self-downloaded 
packages.  Like /opt/eclipse and /opt/Qt.


I'm curious, on your slackware system, where do your *.vim files live? 
(like filetype.vim)  The povray %INSTALLDIR% is a cousin of that.

-- 
dik
Rendered 1024 of 2073600 pixels (0%)


Post a reply to this message

From: jr
Subject: Re: povray.conf contains evil directory
Date: 11 Oct 2019 13:30:00
Message: <web.5da082cf783a8ea6feeb22ff0@news.povray.org>
hi,

Dick Balaska <dic### [at] buckosoftcom> wrote:
> On 10/11/19 7:22 AM, jr wrote:
> > Dick Balaska <dic### [at] buckosoftcom> wrote:
> >> ...
> >> For me, on debian/ubuntu/mint, povray/qtpovray ends up at
> >> /usr/share/povray-3.7
> >> /usr/share/qtpovray-3.8
> > weird.  neither is "system" software, so should go under '/usr/local' (or
> > '/opt'), aiui.
>
> /usr/share: Architecture-independent (shared) data.
> https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard

thanks.  could have sworn there's a section 7 man page too, but cannot find it
now.  :-(

> I have 351 directories of foo under /usr/share
> /usr/local is for stuff I build myself.  I didn't, I installed the
> "official" debian package.
>
> /opt is for optional.   Good for whole self contained self-downloaded
> packages.  Like /opt/eclipse and /opt/Qt.

still, strange choice.  conflict between build system and packaging tool?  in my
(nvh) opinion, the packages should install under '/usr/local', and the
"architecture independent" stuff under '/usr/local/share'.

wrt '/opt', _if_ POV-Ray installed as '/opt/povray/{bin,etc,share}', I'd be ok
with that too.

if you create your own (qtpovray) package, does that differ from the official
package?  (blame the maintainer!  ;-))

> I'm curious, on your slackware system, where do your *.vim files live?
> (like filetype.vim)  The povray %INSTALLDIR% is a cousin of that.

'/usr/share/vim'.  however, the editor is (of course) part of the system s/ware.


regards, jr.


Post a reply to this message

From: William F Pokorny
Subject: Re: povray.conf contains evil directory
Date: 11 Oct 2019 15:17:34
Message: <5da09d0e$1@news.povray.org>
On 10/11/19 9:25 AM, jr wrote:
> hi,
> 
> Dick Balaska <dic### [at] buckosoftcom> wrote:
>> On 10/11/19 7:22 AM, jr wrote:
>>> Dick Balaska <dic### [at] buckosoftcom> wrote:
>>>> ...
>>>> For me, on debian/ubuntu/mint, povray/qtpovray ends up at
>>>> /usr/share/povray-3.7
>>>> /usr/share/qtpovray-3.8
>>> weird.  neither is "system" software, so should go under '/usr/local' (or
>>> '/opt'), aiui.
>>
>> /usr/share: Architecture-independent (shared) data.
>> https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard
> 
> thanks.  could have sworn there's a section 7 man page too, but cannot find it
> now.  :-(
> 
>> I have 351 directories of foo under /usr/share
>> /usr/local is for stuff I build myself.  I didn't, I installed the
>> "official" debian package.
>>
>> /opt is for optional.   Good for whole self contained self-downloaded
>> packages.  Like /opt/eclipse and /opt/Qt.
> 
> still, strange choice.  conflict between build system and packaging tool?  in my
> (nvh) opinion, the packages should install under '/usr/local', and the
> "architecture independent" stuff under '/usr/local/share'.
> 
> wrt '/opt', _if_ POV-Ray installed as '/opt/povray/{bin,etc,share}', I'd be ok
> with that too.
> 
> if you create your own (qtpovray) package, does that differ from the official
> package?  (blame the maintainer!  ;-))
> 
>> I'm curious, on your slackware system, where do your *.vim files live?
>> (like filetype.vim)  The povray %INSTALLDIR% is a cousin of that.
> 
> '/usr/share/vim'.  however, the editor is (of course) part of the system s/ware.
> 
> regards, jr.
> 

With respect to /opt/<package>, on my Ubuntu system at the moment I have 
the /opt mount point, but nothing there. When you install something like 
/opt/eclipse, does that install update PATH and so on for everyone on 
the system?

The user PATH is set up already with /usr/bin and /usr/local/bin so an 
executable placed in either of those directories naturally gets picked up.

With respect to the povray etc directory, I think builds are hard coded 
to look for it and those two files, but uncertain of details. If 
correct, it means any change will be more than just deleting that 
povray.conf line. We'd need to find another home for those /etc files.

I'm not very familiar with the package build process, but for my 
/usr/local installs the necessary /etc directory was created - povray 
stuff 3.7 and 3.8 versions is all that's there. Does this sort of 
directory creation not happen on /usr/share distribution package installs?

Is perhaps <>/etc out of favor as a directory these days?

Bill P.


Post a reply to this message

From: jr
Subject: Re: povray.conf contains evil directory
Date: 11 Oct 2019 15:45:01
Message: <web.5da0a34b783a8ea6feeb22ff0@news.povray.org>
hi,

William F Pokorny <ano### [at] anonymousorg> wrote:
> On 10/11/19 9:25 AM, jr wrote:
> > Dick Balaska <dic### [at] buckosoftcom> wrote:
> >> On 10/11/19 7:22 AM, jr wrote:
> >>> Dick Balaska <dic### [at] buckosoftcom> wrote:
> >>>> ...
> >>>> For me, on debian/ubuntu/mint, povray/qtpovray ends up at
> >>>> /usr/share/povray-3.7
> >>>> /usr/share/qtpovray-3.8
> >>> weird.  neither is "system" software, so should go under '/usr/local' (or
> >>> '/opt'), aiui.
> >>
> >> /usr/share: Architecture-independent (shared) data.
> >> https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard
> >
> > thanks.  could have sworn there's a section 7 man page too, but cannot find it
> > now.  :-(
> >
> >> I have 351 directories of foo under /usr/share
> >> /usr/local is for stuff I build myself.  I didn't, I installed the
> >> "official" debian package.
> >>
> >> /opt is for optional.   Good for whole self contained self-downloaded
> >> packages.  Like /opt/eclipse and /opt/Qt.
> >
> > still, strange choice.  conflict between build system and packaging tool?  in my
> > (nvh) opinion, the packages should install under '/usr/local', and the
> > "architecture independent" stuff under '/usr/local/share'.
> >
> > wrt '/opt', _if_ POV-Ray installed as '/opt/povray/{bin,etc,share}', I'd be ok
> > with that too.
> >
> > if you create your own (qtpovray) package, does that differ from the official
> > package?  (blame the maintainer!  ;-))
> >
> >> I'm curious, on your slackware system, where do your *.vim files live?
> >> (like filetype.vim)  The povray %INSTALLDIR% is a cousin of that.
> >
> > '/usr/share/vim'.  however, the editor is (of course) part of the system s/ware.
> >
> > regards, jr.
> >
>
> With respect to /opt/<package>, on my Ubuntu system at the moment I have
> the /opt mount point, but nothing there. When you install something like
> /opt/eclipse, does that install update PATH and so on for everyone on
> the system?
>
> The user PATH is set up already with /usr/bin and /usr/local/bin so an
> executable placed in either of those directories naturally gets picked up.
>
> With respect to the povray etc directory, I think builds are hard coded
> to look for it and those two files, but uncertain of details. If
> correct, it means any change will be more than just deleting that
> povray.conf line. We'd need to find another home for those /etc files.
>
> I'm not very familiar with the package build process, but for my
> /usr/local installs the necessary /etc directory was created - povray
> stuff 3.7 and 3.8 versions is all that's there. Does this sort of
> directory creation not happen on /usr/share distribution package installs?
>
> Is perhaps <>/etc out of favor as a directory these days?

can only answer one of the questions.  typically a package installing in '/opt'
provides a 'somepackage.{sh,csh}' to go into '/etc/profile.d' where the shell
picks it up on login; Qt5 is an example, all it does is set an environment
variable and append the PATH.

like you, I never had "trouble" with POV-Ray installing under '/usr/local', it
just works.  why would/should the 'povray.{conf,ini} not go under
/usr/local/etc'?


regards, jr.


Post a reply to this message

Copyright 2003-2008 Persistence of Vision Raytracer Pty. Ltd.