Document that property write-protection is not a security measure

(Nasal can remove it)

diff --git a/src/Main/fg_init.cxx b/src/Main/fg_init.cxx
index cfb31f25b1b86764be60415942dcb9eabff12ea2..9604f2a591b54560a363fc27b8f082da0ab7b0a7 100644 (file)
--- a/src/Main/fg_init.cxx
+++ b/src/Main/fg_init.cxx
@@ -446,8 +446,9 @@ int fgInitConfig ( int argc, char **argv, bool reinit )
       exportDir.create(0755);
     }
     
-    // Set /sim/fg-home and don't allow malign code to override it until
-    // Nasal security is set up.  Use FG_HOME if necessary.
+    // Set /sim/fg-home.  Use FG_HOME if necessary.
+    // deliberately not a tied property, for fgValidatePath security
+    // write-protect to avoid accidents
     SGPropertyNode *home = fgGetNode("/sim", true);
     home->removeChild("fg-home", 0);
     home = home->getChild("fg-home", 0, true);
@@ -486,6 +487,8 @@ int fgInitConfig ( int argc, char **argv, bool reinit )
 
 static void initAircraftDirsNasalSecurity()
 {
+    // deliberately not a tied property, for fgValidatePath security
+    // write-protect to avoid accidents
     SGPropertyNode* sim = fgGetNode("/sim", true);
     sim->removeChildren("fg-aircraft");
 

diff --git a/src/Main/globals.cxx b/src/Main/globals.cxx
index 718e70e556dbc5c65199045b1e62b28bc67b63b2..d41e00d5f2bff7e3bec088e73ca2cb2df72124d8 100644 (file)
--- a/src/Main/globals.cxx
+++ b/src/Main/globals.cxx
@@ -273,7 +273,8 @@ void FGGlobals::set_fg_root (const std::string &root) {
                 << fg_root << "'\n***\n***");
     }
 
-    // remove /sim/fg-root before writing to prevent hijacking
+    // deliberately not a tied property, for fgValidatePath security
+    // write-protect to avoid accidents
     SGPropertyNode *n = fgGetNode("/sim", true);
     n->removeChild("fg-root", 0);
     n = n->getChild("fg-root", 0, true);