🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: gnu.emacs.bug
Article #99648

Re: Possible security problem -- File variables & `eval'

#99648
From: Randal Schwartz
Date: Thu, 21 Jun 1990 23:07
24 lines
2034 bytes
In article <9006211721.AA04340@noname>, eric%yamada-sun writes:
|		   What might be nice as a safeguard is a variable,
| called something like `visit-file-paranoid', which if not nil, would
| refuse to eval anything in the local variables section without
| confirmation from the user.  So if I had this variable set, and
| visited a file as described above, I'd see a little buffer created
| with the Lisp code in it, and a message in the minibuffer saying `Okay
| to execute this code??'

You can start by
	(setq inhibit-local-variables t)
in your .emacs.  But, yes, I've wanted more of a "check this puppy
out" intermediate solution, as you suggest.

Maybe a hook in "hack-local-variables", that if present, *had* to
return a "t" for the variables to be evalled.  That way, I could say
"anything below $HOME is safe", or whatever.

Just another Emacs hacker,
-- 
/=Randal L. Schwartz, Stonehenge Consulting Services (503)777-0095 ==========\
| on contract to Intel's iWarp project, Beaverton, Oregon, USA, Sol III      |
| merlyn@iwarp.intel.com ...!any-MX-mailer-like-uunet!iwarp.intel.com!merlyn |
\=Cute Quote: "Welcome to Portland, Oregon, home of the California Raisins!"=/
Technical Details
Message-ID: <1990Jun21.230710.8614@iwarp.intel.com>
Path: arc1-ca.pugleaf.net!gmdzi!unido!mcsun!uunet!samsung!sdd.hp.com!uakari.primate.wisc.edu!zaphod.mps.ohio-state.edu!uwm.edu!ogicse!iwarp.intel.com!news
References: <9006211721.AA04340@noname>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fb2f1,3a0d70cd65e07cb9
X-Google-Attributes: gidfb2f1,public
X-Google-ArrivalTime: 1990-06-22 11:39:42 PST
Path: arc1-ca.pugleaf.net!gmdzi!unido!mcsun!uunet!samsung!sdd.hp.com!uakari.primate.wisc.edu!zaphod.mps.ohio-state.edu!uwm.edu!ogicse!iwarp.intel.com!news
From: merlyn@iwarp.intel.com (Randal Schwartz)
Newsgroups: gnu.emacs.bug
Subject: Re: Possible security problem -- File variables & `eval'
Message-ID: <1990Jun21.230710.8614@iwarp.intel.com>
Date: 21 Jun 90 23:07:10 GMT
References: <9006211721.AA04340@noname>
Sender: news@iwarp.intel.com
Reply-To: merlyn@iwarp.intel.com (Randal Schwartz)
Distribution: gnu
Organization: Stonehenge; netaccess via Intel, Beaverton, Oregon, USA
Lines: 24
Posted: Fri Jun 22 00:07:10 1990
In-Reply-To: eric%yamada-sun@CSE.OGI.EDU