🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: gnu.emacs.bug
Article #98736

Re: Emacs support for Trojan horses

#98736
From: Dave Sill
Date: Fri, 22 Mar 1991 13:20
30 lines
2049 bytes
In article <3188@charon.cwi.nl>, guido@cwi.nl (Guido van Rossum) writes:
>There is a feature of GNU Emacs, enabled by default, which makes a
>very convenient vehicle for Trojan horses.  The facility is described
>in the 'file variables' section of the info tree, and lets you execute
>any Emacs Lisp code when a file is loaded into a buffer.
> ...
>Shouldn't this feature be protected in some way, e.g., by asking the
>user permission to execute such code (if it is more than just setting
>a major mode)?

Yes, the default value of inhibit-local-variables should be nil.  Add
the following to your .emacs:

(setq inhibit-local-variables t)

And it will ask you if you want to set local variables.

Also, this item from the elisp archive:

hack-locals       88-12-04
     Carl Witty, <cwitty@csli.stanford.edu>
     tut.cis.ohio-state.edu:pub/gnu/emacs/elisp-archive/misc/hack-locals.el.Z
     Show local variables on screen

Will display the variables and ask if you want them set.

-- 
Dave Sill (de5@ornl.gov)	  It will be a great day when our schools have
Martin Marietta Energy Systems    all the money they need and the Air Force
Workstation Support               has to hold a bake sale to buy a new bomber.
Technical Details
Message-ID: <1991Mar22.132031.25459@cs.utk.edu>
Path: arc1-ca.pugleaf.net!gmdzi!unido!fauern!ira.uka.de!sol.ctr.columbia.edu!lll-winken!elroy.jpl.nasa.gov!usc!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!tut.cis.ohio-state.edu!unreplyable!garbage
References: <3188@charon.cwi.nl>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fb2f1,20b72a5f29845d78
X-Google-Attributes: gidfb2f1,public
X-Google-ArrivalTime: 1991-03-22 05:20:31 PST
Path: arc1-ca.pugleaf.net!gmdzi!unido!fauern!ira.uka.de!sol.ctr.columbia.edu!lll-winken!elroy.jpl.nasa.gov!usc!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!tut.cis.ohio-state.edu!unreplyable!garbage
From: de5@ORNL.GOV (Dave Sill)
Newsgroups: gnu.emacs.bug
Subject: Re: Emacs support for Trojan horses
Keywords: Trojan horse, security, Emacs
Message-ID: <1991Mar22.132031.25459@cs.utk.edu>
Date: 22 Mar 91 13:20:31 GMT
References: <3188@charon.cwi.nl>
Sender: daemon@tut.cis.ohio-state.edu
Reply-To: Dave Sill <de5@ornl.gov>
Distribution: gnu
Organization: Oak Ridge National Laboratory
Lines: 30
Approved: bug-gnu-emacs@prep.ai.mit.edu