From b531e56eef5eff5aea79c343d6d15295768f5b32 Mon Sep 17 00:00:00 2001 From: fr33domlover Date: Fri, 24 Oct 2014 06:19:54 -0400 Subject: [PATCH] Update comment --- doc/plugins/contrib/compile/discussion.mdwn | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/doc/plugins/contrib/compile/discussion.mdwn b/doc/plugins/contrib/compile/discussion.mdwn index 7777750ec..96269d4e4 100644 --- a/doc/plugins/contrib/compile/discussion.mdwn +++ b/doc/plugins/contrib/compile/discussion.mdwn @@ -7,7 +7,9 @@ Problem: Any user can change the command to something dangerous that deletes fil causes irreversible damage to the system. I can even happen by mistake. Suggestion: Add an option to the setup file that forbids to override the build command in the -directive, and then only the setup file can configure build commands (if you want). +directive, and then only the setup file can configure build commands (if you want). Another +idea, an option to validate the build command, either against a regex or using an arbitrary +script specified in setup file - then e.g. you can choose which commands are allowed. What do you think?