[Mesa-dev] GLSL IR & TGSI on-disk shader cache

[Pierre-Loup A. Griffais]

On 02/11/2017 08:47 AM, Andre Heider wrote:
> On 02/11/2017 03:44 AM, Pierre-Loup A. Griffais wrote:
>> On 02/10/2017 04:01 AM, Nicolai Hähnle wrote:
>>> On 10.02.2017 12:46, Timothy Arceri wrote:
>>>> On 10/02/17 21:35, Nicolai Hähnle wrote:
>>>>> The people who want to distribute precompiled binaries will have to
>>>>> set up infrastructure where they do the precompilation across all the
>>>>> distro/build combinations that they want to support.
>>>>
>>>> I believe the plan is to also have them collected directly from users.
>>>
>>> Oh $deity, please no. That's a security nightmare waiting to happen.
>>
>> Debatable, but off-topic either way; happy to chat about it offline.
>
> Maybe that's just me, but if this series allows 3rd parties to ship and
> run code from untrusted sources, then I don't see how this is off-topic.
>
> It's rather that sort of topic that should not be discussed offline.

One could argue that it would be a good idea for Mesa to check that the 
cache directory isn't writable by other users in the system, or that the 
cache files are owned by the same user as the process. That's probably 
the extent of the security aspect Mesa would have to worry about for 
that feature.

>
> Regards,
> Andre
>