From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.bugs Subject: bug#17625: 24.4.50; All installed packages marked "unsigned", no archive listed Date: Wed, 01 Oct 2014 19:13:51 -0400 Organization: =?UTF-8?Q?=D0=A2=D0=B5=D0=BE=D0=B4=D0=BE=D1=80_?= =?UTF-8?Q?=D0=97=D0=BB=D0=B0=D1=82=D0=B0=D0=BD=D0=BE=D0=B2?= @ Cienfuegos Message-ID: <87oatvqt74.fsf@lifelogs.com> References: <87tx89ffax.fsf@pellet.i-did-not-set--mail-host-address--so-tickle-me> <2vvbsnrgpk.fsf@fencepost.gnu.org> <87mwczagnm.fsf@lifelogs.com> <87ionna453.fsf@lifelogs.com> <87egyb9ns6.fsf@lifelogs.com> <87fvfahrq5.fsf@lifelogs.com> <87h9zp5q1w.fsf@lifelogs.com> <83r3ytkwz0.fsf@gnu.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1412205268 15532 80.91.229.3 (1 Oct 2014 23:14:28 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 1 Oct 2014 23:14:28 +0000 (UTC) Cc: 17625@debbugs.gnu.org To: Stefan Monnier , Daiki Ueno Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Thu Oct 02 01:14:21 2014 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XZT69-0004zA-T0 for geb-bug-gnu-emacs@m.gmane.org; Thu, 02 Oct 2014 01:14:18 +0200 Original-Received: from localhost ([::1]:59227 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XZT69-0006SW-FA for geb-bug-gnu-emacs@m.gmane.org; Wed, 01 Oct 2014 19:14:17 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:54534) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XZT60-0006SN-EI for bug-gnu-emacs@gnu.org; Wed, 01 Oct 2014 19:14:14 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XZT5u-0006ja-HJ for bug-gnu-emacs@gnu.org; Wed, 01 Oct 2014 19:14:08 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:38026) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XZT5u-0006jW-BP for bug-gnu-emacs@gnu.org; Wed, 01 Oct 2014 19:14:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1XZT5t-0005ho-Sa for bug-gnu-emacs@gnu.org; Wed, 01 Oct 2014 19:14:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Ted Zlatanov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 01 Oct 2014 23:14:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 17625 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security Original-Received: via spool by 17625-submit@debbugs.gnu.org id=B17625.141220519421865 (code B ref 17625); Wed, 01 Oct 2014 23:14:01 +0000 Original-Received: (at 17625) by debbugs.gnu.org; 1 Oct 2014 23:13:14 +0000 Original-Received: from localhost ([127.0.0.1]:57823 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XZT57-0005gZ-N7 for submit@debbugs.gnu.org; Wed, 01 Oct 2014 19:13:14 -0400 Original-Received: from mail-qa0-f44.google.com ([209.85.216.44]:48513) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XZT54-0005gO-Hp for 17625@debbugs.gnu.org; Wed, 01 Oct 2014 19:13:11 -0400 Original-Received: by mail-qa0-f44.google.com with SMTP id x12so1053836qac.31 for <17625@debbugs.gnu.org>; Wed, 01 Oct 2014 16:13:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google; h=from:to:cc:subject:organization:references:mail-copies-to :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version:content-type; bh=pkSH3e5PWr6jwd7FUsAjvCSXtpA6q1Wrn7pbNEOF44c=; b=Nj5T1KQIK48HYfBNCOizGtxWOGdekJJWr2l+9BFKyVFix7Mq6AmPiytzgOwTS9/kqA taImMNfJ3bn6Uq+YZhQsNN2LK2s4h8GPclVihWBhvuq8/WAYF0YtuGvynObHoauLFmBu ALrOaNMUvagKC6oKCKXQrNmfIcTSLcDQjy37U= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:organization:references :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version:content-type; bh=pkSH3e5PWr6jwd7FUsAjvCSXtpA6q1Wrn7pbNEOF44c=; b=SQ1qfk4go7kfU//8EYWQyivfGaOgNGuv1h1Ww8MNGWZPVynIf3/QV/XCxtCsA8Q1aE SsNgfTmPHUeAR82ZXyrDPTWCOJ6OlgnnUd3JQcLXRp4oBOQ3AzGILhD20dReG220nYZe 5ZcwJKtJfnVWq2mUjI5JFCCS0qIjS+qErr9CB2+KNqCCRAKz3B0kSHUKpUi4P1goA/sc apoJWtIaI4Z0rhlOISc8RFZ7rQK9Xo2H09xckC/XGEyR47HOUUPBuhP7dJ/DEC3UjIqJ t4eqPoATbhyTFfXT6Ur6DXswX9Sf2IBqriNtGSnt2ZQpKYV3jpL7ku2PX1yoRvPVSmYM NnoA== X-Gm-Message-State: ALoCoQk9R4DXEIusR2LfqDixY4pFKQ2RZxUnWcSuefsdmj6tBPOtf+V8BElGvR4irRSP1ASqXT2b X-Received: by 10.140.38.81 with SMTP id s75mr88103638qgs.4.1412205190031; Wed, 01 Oct 2014 16:13:10 -0700 (PDT) Original-Received: from flea (c-98-229-61-72.hsd1.ma.comcast.net. [98.229.61.72]) by mx.google.com with ESMTPSA id c3sm1833784qga.47.2014.10.01.16.13.09 for (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Wed, 01 Oct 2014 16:13:09 -0700 (PDT) X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes In-Reply-To: (Ted Zlatanov's message of "Tue, 30 Sep 2014 14:19:34 -0400") User-Agent: Gnus/5.130008 (Ma Gnus v0.8) Emacs/25.0.50 (gnu/linux) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:94000 Archived-At: My test report from the emacs-24 branch: Everything worked smoothly with GnuPG 1.x installed (install signed package load-dir from the GNU ELPA; fail unsigned package typing-practice from marmalade). It was a very nice experience! I didn't try corrupting archive-contents or package contents. When I intentionally broke GnuPG (made /usr/bin/gpg a copy of /bin/false) the errors were reasonable. The homedir, defaulting to `/home/tzz/.emacs.d/elpa/gnupg' in my case, was created with 755 permissions and GnuPG rightly complained: gpg: WARNING: unsafe permissions on homedir `/home/tzz/.emacs.d/elpa/gnupg' I didn't make the necessary change but it's trivial. I would make `package-check-signature' a radio instead of a dropdown choice, since there are only three possibilities and it's nice to see them all at once. Otherwise the user has to click on the dropdown to see them. I hope that's helpful. I can make the two changes suggested above if you wish. I also feel it is very reasonable to set `package-check-signature' to t (if GnuPG is installed) in the next release, because the experience is so seamless. But at least for myself, I'm happily setting it to t now. I think it would be nice for new users to explain a little more about this new feature and process in packages.texi or in the main manual. Thanks for your patience Ted