Article View: gnu.emacs.bug
Article #98736Re: Emacs support for Trojan horses
From: Dave Sill
Date: Fri, 22 Mar 1991 13:20
Date: Fri, 22 Mar 1991 13:20
30 lines
2049 bytes
2049 bytes
In article <3188@charon.cwi.nl>, guido@cwi.nl (Guido van Rossum) writes:
>There is a feature of GNU Emacs, enabled by default, which makes a
>very convenient vehicle for Trojan horses. The facility is described
>in the 'file variables' section of the info tree, and lets you execute
>any Emacs Lisp code when a file is loaded into a buffer.
> ...
>Shouldn't this feature be protected in some way, e.g., by asking the
>user permission to execute such code (if it is more than just setting
>a major mode)?
Yes, the default value of inhibit-local-variables should be nil. Add
the following to your .emacs:
(setq inhibit-local-variables t)
And it will ask you if you want to set local variables.
Also, this item from the elisp archive:
hack-locals 88-12-04
Carl Witty, <cwitty@csli.stanford.edu>
tut.cis.ohio-state.edu:pub/gnu/emacs/elisp-archive/misc/hack-locals.el.Z
Show local variables on screen
Will display the variables and ask if you want them set.
--
Dave Sill (de5@ornl.gov) It will be a great day when our schools have
Martin Marietta Energy Systems all the money they need and the Air Force
Workstation Support has to hold a bake sale to buy a new bomber.
Technical Details
Message-ID:
<1991Mar22.132031.25459@cs.utk.edu>Path:
arc1-ca.pugleaf.net!gmdzi!unido!fauern!ira.uka.de!sol.ctr.columbia.edu!lll-winken!elroy.jpl.nasa.gov!usc!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!tut.cis.ohio-state.edu!unreplyable!garbageReferences:
<3188@charon.cwi.nl>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fb2f1,20b72a5f29845d78 X-Google-Attributes: gidfb2f1,public X-Google-ArrivalTime: 1991-03-22 05:20:31 PST Path: arc1-ca.pugleaf.net!gmdzi!unido!fauern!ira.uka.de!sol.ctr.columbia.edu!lll-winken!elroy.jpl.nasa.gov!usc!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!tut.cis.ohio-state.edu!unreplyable!garbage From: de5@ORNL.GOV (Dave Sill) Newsgroups: gnu.emacs.bug Subject: Re: Emacs support for Trojan horses Keywords: Trojan horse, security, Emacs Message-ID: <1991Mar22.132031.25459@cs.utk.edu> Date: 22 Mar 91 13:20:31 GMT References: <3188@charon.cwi.nl> Sender: daemon@tut.cis.ohio-state.edu Reply-To: Dave Sill <de5@ornl.gov> Distribution: gnu Organization: Oak Ridge National Laboratory Lines: 30 Approved: bug-gnu-emacs@prep.ai.mit.edu