🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: gnu.emacs.bug
Article #98744

Re: Emacs support for Trojan horses

#98744
From: Guido van Rossum
Date: Sat, 23 Mar 1991 11:19
25 lines
1739 bytes
I wrote:

>There is a feature of GNU Emacs, enabled by default, which makes a
>very convenient vehicle for Trojan horses.  The facility is described
>in the 'file variables' section of the info tree, and lets you execute
>any Emacs Lisp code when a file is loaded into a buffer.
>[...]
>Shouldn't this feature be protected in some way, e.g., by asking the
>user permission to execute such code (if it is more than just setting
>a major mode)?

It turns out there is a way to protect this feature: put this in .emacs:

	(setq inhibit-local-variables t)

Thanks to everybody who pointed this out (although I'm still puzzled
about the example showing why it's useful).  Now all I can complain
about is that this isn't default :-(

(Anecdote: when I wanted to post this follow-up, the eval stuff quited
in the original article started to edit my reply, deleting part of the
header before it ran into trouble...)

--Guido van Rossum, CWI, Amsterdam <guido@cwi.nl>
"Repo Man's got all night, *every* night"
Technical Details
Message-ID: <3209@charon.cwi.nl>
Path: arc1-ca.pugleaf.net!gmdzi!unido!fauern!ira.uka.de!sol.ctr.columbia.edu!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!tut.cis.ohio-state.edu!unreplyable!garbage
References: <3188@charon.cwi.nl>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fb2f1,20b72a5f29845d78
X-Google-Attributes: gidfb2f1,public
X-Google-ArrivalTime: 1991-03-23 09:44:36 PST
Path: arc1-ca.pugleaf.net!gmdzi!unido!fauern!ira.uka.de!sol.ctr.columbia.edu!zaphod.mps.ohio-state.edu!magnus.acs.ohio-state.edu!tut.cis.ohio-state.edu!unreplyable!garbage
From: guido@cwi.nl (Guido van Rossum)
Newsgroups: gnu.emacs.bug
Subject: Re: Emacs support for Trojan horses
Keywords: Trojan horse, security, Emacs
Message-ID: <3209@charon.cwi.nl>
Date: 23 Mar 91 11:19:12 GMT
References: <3188@charon.cwi.nl>
Sender: daemon@tut.cis.ohio-state.edu
Distribution: gnu
Organization: GNUs Not Usenet
Lines: 25
Approved: bug-gnu-emacs@prep.ai.mit.edu