[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#75017: 31.0.50; Untrusted user lisp files
From: |
Stefan Kangas |
Subject: |
bug#75017: 31.0.50; Untrusted user lisp files |
Date: |
Sun, 22 Dec 2024 17:36:15 +0000 |
Eli Zaretskii <eliz@gnu.org> writes:
>> From: Stefan Monnier <monnier@iro.umontreal.ca>
>> Cc: john muhl <jm@pub.pink>, 75017@debbugs.gnu.org, Eli Zaretskii
>> <eliz@gnu.org>, Andrea Corallo <acorallo@gnu.org>
>> Date: Sat, 21 Dec 2024 22:16:05 -0500
>>
>> > Maybe we should install something like the below?
>>
>> Fine by me, but I think this should be added via a new
>> `trusted-content-function(s)` and added buffer-locally only in
>> elisp-mode buffers.
>
> Sorry, but this is slippery slope. For starters, no one said that
> site-run-file is installed by a sysadmin -- that is only so on certain
> systems. For example, MS-Windows is generally not in that category.
It doesn't matter who can edit it. `site-run-file` is already trusted,
since it is loaded at run-time before `user-init-file`.
- bug#75017: 31.0.50; Untrusted user lisp files, john muhl, 2024/12/21
- bug#75017: 31.0.50; Untrusted user lisp files, Stefan Kangas, 2024/12/21
- bug#75017: 31.0.50; Untrusted user lisp files, Stefan Monnier, 2024/12/21
- bug#75017: 31.0.50; Untrusted user lisp files, Eli Zaretskii, 2024/12/22
- bug#75017: 31.0.50; Untrusted user lisp files,
Stefan Kangas <=
- bug#75017: 31.0.50; Untrusted user lisp files, Eli Zaretskii, 2024/12/22
- bug#75017: 31.0.50; Untrusted user lisp files, Drew Adams, 2024/12/22
- bug#75017: 31.0.50; Untrusted user lisp files, Stefan Kangas, 2024/12/23
- bug#75017: 31.0.50; Untrusted user lisp files, Eli Zaretskii, 2024/12/23
- bug#75017: 31.0.50; Untrusted user lisp files, Stefan Kangas, 2024/12/23
- bug#75017: 31.0.50; Untrusted user lisp files, Eli Zaretskii, 2024/12/24
- bug#75017: 31.0.50; Untrusted user lisp files, Björn Bidar, 2024/12/23
bug#75017: 31.0.50; Untrusted user lisp files, Eli Zaretskii, 2024/12/22