[Bug 457791] Re: Build sqlite3 with SQLITE_SECURE_DELETE

[Micah Gersten]

>From sdwilsh upstream:
(In reply to comment #15)
> What about vacuuming only if SQLite is not compiled with SQLITE_SECURE_DELETE?
> This seems more likely to be secure than relying on distros to negatively
> impact performance of every use of SQLite in exchange for browser security.
Vacuuming is an expensive operation.  Distros need to get the changes they make
to Firefox approved in order to call it Firefox (although you have Shiretoko,
so all bets are off).  There are parts of Firefox that depend on
SQLITE_SECURE_DELETE, so if they want to use system SQLite, they need to
compile it that way.

compile it that way.


** Changed in: firefox-3.0 (Ubuntu)
   Importance: Undecided => High

** Changed in: firefox-3.0 (Ubuntu)
       Status: New => Triaged

** Changed in: firefox-3.5 (Ubuntu)
   Importance: Undecided => High

** Changed in: firefox-3.5 (Ubuntu)
       Status: New => Triaged

** Changed in: firefox-3.5 (Ubuntu)
     Assignee: (unassigned) => Alexander Sack (asac)

-- 
Build sqlite3 with SQLITE_SECURE_DELETE
https://bugs.launchpad.net/bugs/457791
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox-3.0 in ubuntu.