emacs-pretest-bug
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(open-dribble-file FILENAME) should be secure by default


From: Andrew M. Scott~
Subject: (open-dribble-file FILENAME) should be secure by default
Date: Thu, 16 Oct 2003 15:57:02 -0700

Invoking (open-dribble-file "~/dribble") in my ~/.emacs, where the "~/"
directory has chmod 755 permissions creates a file dribble with chmod
permissions 644. I expected that the created dribble file should have
chmod 600 permissions by default so others can't read it, as the
dribble file can contain user passwords (e.g. if using tramp during
the debug cycle).

As a minimum, perhaps the emacs open-dribble-file docstring and emacs
*info* entry for open-dribble-file could caution against this
insecurity.

In GNU Emacs 21.3.50.1 (i686-pc-linux-gnu, X toolkit, Xaw3d scroll bars)
 of 2003-10-01 on chlx022
configured using `configure '--prefix=/stor/garray/linux' 
'--with-x-toolkit=yes' '--x-includes=/usr/X11R6' '--x-libraries=/usr/X11R6/lib' 
'CC=gcc''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: C
  locale-coding-system: nil
  default-enable-multibyte-characters: t

Major mode: Mail

Minor modes in effect:
  tool-bar-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  unify-8859-on-encoding-mode: t
  line-number-mode: t

Recent input:
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <menu-bar> <help-menu> <report-emacs-b
ug>

Recent messages:
Loading mwheel...done
(emacs -q)
Loading tool-bar...done
Loading image...done
Loading tooltip...done
Loading emacsbug...done




reply via email to

[Prev in Thread] Current Thread [Next in Thread]