Article View: gnu.emacs.bug
Article #98742Re: Emacs support for Trojan horses
From: Stephen Gildea
Date: Fri, 22 Mar 1991 21:05
Date: Fri, 22 Mar 1991 21:05
21 lines
1430 bytes
1430 bytes
There is a feature of GNU Emacs, enabled by default, which makes a
very convenient vehicle for Trojan horses. The facility is described
in the 'file variables' section of the info tree, and lets you execute
any Emacs Lisp code when a file is loaded into a buffer....
Shouldn't this feature be protected in some way, e.g., by asking the
user permission to execute such code (if it is more than just setting
a major mode)?
Put this form in your .emacs file:
(setq inhibit-local-variables t)
This setting will have Emacs ask you before running the code. In
Emacs 18.56 or later, it will even show you the code it is proposing
to run.
< Stephen
MIT X Consortium
Technical Details
Message-ID:
<9103222105.AA01046@alex.lcs.mit.edu>Path:
arc1-ca.pugleaf.net!gmdzi!unido!fauern!ira.uka.de!sol.ctr.columbia.edu!zaphod.mps.ohio-state.edu!tut.cis.ohio-state.edu!unreplyable!garbageReferences:
<3188@charon.cwi.nl>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fb2f1,20b72a5f29845d78 X-Google-Attributes: gidfb2f1,public X-Google-ArrivalTime: 1991-03-23 09:29:52 PST Path: arc1-ca.pugleaf.net!gmdzi!unido!fauern!ira.uka.de!sol.ctr.columbia.edu!zaphod.mps.ohio-state.edu!tut.cis.ohio-state.edu!unreplyable!garbage From: gildea@EXPO.LCS.MIT.EDU (Stephen Gildea) Newsgroups: gnu.emacs.bug Subject: Re: Emacs support for Trojan horses Message-ID: <9103222105.AA01046@alex.lcs.mit.edu> Date: 22 Mar 91 21:05:47 GMT References: <3188@charon.cwi.nl> Sender: daemon@tut.cis.ohio-state.edu Distribution: gnu Organization: X Consortium, MIT Laboratory for Computer Science Lines: 21 Approved: bug-gnu-emacs@prep.ai.mit.edu