Article View: gnu.emacs.bug
Article #98744Re: Emacs support for Trojan horses
From: Guido van Rossum
Date: Sat, 23 Mar 1991 11:19
Date: Sat, 23 Mar 1991 11:19
25 lines
1739 bytes
1739 bytes
I wrote: >There is a feature of GNU Emacs, enabled by default, which makes a >very convenient vehicle for Trojan horses. The facility is described >in the 'file variables' section of the info tree, and lets you execute >any Emacs Lisp code when a file is loaded into a buffer. >[...] >Shouldn't this feature be protected in some way, e.g., by asking the >user permission to execute such code (if it is more than just setting >a major mode)? It turns out there is a way to protect this feature: put this in .emacs: (setq inhibit-local-variables t) Thanks to everybody who pointed this out (although I'm still puzzled about the example showing why it's useful). Now all I can complain about is that this isn't default :-( (Anecdote: when I wanted to post this follow-up, the eval stuff quited in the original article started to edit my reply, deleting part of the header before it ran into trouble...) --Guido van Rossum, CWI, Amsterdam <guido@cwi.nl> "Repo Man's got all night, *every* night"
Technical Details
Message-ID:
<3209@charon.cwi.nl>Path:
arc1-ca.pugleaf.net!gmdzi!unido!fauern!ira.uka.de!sol.ctr.columbia.edu!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!tut.cis.ohio-state.edu!unreplyable!garbageReferences:
<3188@charon.cwi.nl>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fb2f1,20b72a5f29845d78 X-Google-Attributes: gidfb2f1,public X-Google-ArrivalTime: 1991-03-23 09:44:36 PST Path: arc1-ca.pugleaf.net!gmdzi!unido!fauern!ira.uka.de!sol.ctr.columbia.edu!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!tut.cis.ohio-state.edu!unreplyable!garbage From: guido@cwi.nl (Guido van Rossum) Newsgroups: gnu.emacs.bug Subject: Re: Emacs support for Trojan horses Keywords: Trojan horse, security, Emacs Message-ID: <3209@charon.cwi.nl> Date: 23 Mar 91 11:19:12 GMT References: <3188@charon.cwi.nl> Sender: daemon@tut.cis.ohio-state.edu Distribution: gnu Organization: GNUs Not Usenet Lines: 25 Approved: bug-gnu-emacs@prep.ai.mit.edu