Article View: gnu.emacs.bug
Article #99648Re: Possible security problem -- File variables & `eval'
From: Randal Schwartz
Date: Thu, 21 Jun 1990 23:07
Date: Thu, 21 Jun 1990 23:07
24 lines
2034 bytes
2034 bytes
In article <9006211721.AA04340@noname>, eric%yamada-sun writes: | What might be nice as a safeguard is a variable, | called something like `visit-file-paranoid', which if not nil, would | refuse to eval anything in the local variables section without | confirmation from the user. So if I had this variable set, and | visited a file as described above, I'd see a little buffer created | with the Lisp code in it, and a message in the minibuffer saying `Okay | to execute this code??' You can start by (setq inhibit-local-variables t) in your .emacs. But, yes, I've wanted more of a "check this puppy out" intermediate solution, as you suggest. Maybe a hook in "hack-local-variables", that if present, *had* to return a "t" for the variables to be evalled. That way, I could say "anything below $HOME is safe", or whatever. Just another Emacs hacker, -- /=Randal L. Schwartz, Stonehenge Consulting Services (503)777-0095 ==========\ | on contract to Intel's iWarp project, Beaverton, Oregon, USA, Sol III | | merlyn@iwarp.intel.com ...!any-MX-mailer-like-uunet!iwarp.intel.com!merlyn | \=Cute Quote: "Welcome to Portland, Oregon, home of the California Raisins!"=/
Technical Details
Message-ID:
<1990Jun21.230710.8614@iwarp.intel.com>Path:
arc1-ca.pugleaf.net!gmdzi!unido!mcsun!uunet!samsung!sdd.hp.com!uakari.primate.wisc.edu!zaphod.mps.ohio-state.edu!uwm.edu!ogicse!iwarp.intel.com!newsReferences:
<9006211721.AA04340@noname>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fb2f1,3a0d70cd65e07cb9 X-Google-Attributes: gidfb2f1,public X-Google-ArrivalTime: 1990-06-22 11:39:42 PST Path: arc1-ca.pugleaf.net!gmdzi!unido!mcsun!uunet!samsung!sdd.hp.com!uakari.primate.wisc.edu!zaphod.mps.ohio-state.edu!uwm.edu!ogicse!iwarp.intel.com!news From: merlyn@iwarp.intel.com (Randal Schwartz) Newsgroups: gnu.emacs.bug Subject: Re: Possible security problem -- File variables & `eval' Message-ID: <1990Jun21.230710.8614@iwarp.intel.com> Date: 21 Jun 90 23:07:10 GMT References: <9006211721.AA04340@noname> Sender: news@iwarp.intel.com Reply-To: merlyn@iwarp.intel.com (Randal Schwartz) Distribution: gnu Organization: Stonehenge; netaccess via Intel, Beaverton, Oregon, USA Lines: 24 Posted: Fri Jun 22 00:07:10 1990 In-Reply-To: eric%yamada-sun@CSE.OGI.EDU