[vlc-devel] [PATCH] modules: bank: Save the cache if it was empty

[Rémi Denis-Courmont]

On Wednesday 18 May 2016 20:28:19 Hugo Beauzée-Luyssen wrote:
> This aims at fixing an issue with some libvlc issues, that wouldn't have
> a plugin cache if they don't rely on a VLC player installation (since we
> generate the cache upon install time)

That would be a bug in the app installer though. There are several issues with 
writing the cache when we would not normally need to.

First, we do not necessarily want to trust random LibVLC apps to generate a 
cache that would be shared with VLC and other apps. There are plenty of subtle 
and less subtle ways to screw up the environment while the plugins bank is 
generated.

More importantly (and more likely), I fear that this creates security 
violations if the user is not allowed to write to application directory. At 
best, that is just a permission denied error, but at worst, the process gets 
killed or the user sees nasty warnings.

-- 
Rémi Denis-Courmont
http://www.remlab.net/