From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Noam Postavsky Newsgroups: gmane.emacs.bugs Subject: bug#28618: Emacs Security Issue Date: Fri, 29 Sep 2017 18:55:13 -0400 Message-ID: <87tvzldsj2.fsf@users.sourceforge.net> References: <87efqrf4k3.fsf@users.sourceforge.net> <87zi9deixz.fsf@users.sourceforge.net> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1506725778 9509 195.159.176.226 (29 Sep 2017 22:56:18 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Fri, 29 Sep 2017 22:56:18 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) Cc: 28618@debbugs.gnu.org, Dor Azouri To: Glenn Morris Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sat Sep 30 00:56:05 2017 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dy4CS-0001Ph-0c for geb-bug-gnu-emacs@m.gmane.org; Sat, 30 Sep 2017 00:56:04 +0200 Original-Received: from localhost ([::1]:37332 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dy4CZ-0000gj-8t for geb-bug-gnu-emacs@m.gmane.org; Fri, 29 Sep 2017 18:56:11 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:49773) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dy4CT-0000fI-IF for bug-gnu-emacs@gnu.org; Fri, 29 Sep 2017 18:56:06 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dy4CQ-0001rL-HK for bug-gnu-emacs@gnu.org; Fri, 29 Sep 2017 18:56:05 -0400 Original-Received: from debbugs.gnu.org ([208.118.235.43]:59315) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dy4CQ-0001rA-DV for bug-gnu-emacs@gnu.org; Fri, 29 Sep 2017 18:56:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dy4CQ-0005mN-1C for bug-gnu-emacs@gnu.org; Fri, 29 Sep 2017 18:56:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Noam Postavsky Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 29 Sep 2017 22:56:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28618 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security unreproducible Original-Received: via spool by 28618-submit@debbugs.gnu.org id=B28618.150672572422163 (code B ref 28618); Fri, 29 Sep 2017 22:56:01 +0000 Original-Received: (at 28618) by debbugs.gnu.org; 29 Sep 2017 22:55:24 +0000 Original-Received: from localhost ([127.0.0.1]:39763 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dy4Bo-0005lJ-9a for submit@debbugs.gnu.org; Fri, 29 Sep 2017 18:55:24 -0400 Original-Received: from mail-io0-f169.google.com ([209.85.223.169]:44992) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dy4Bl-0005l0-Uv; Fri, 29 Sep 2017 18:55:22 -0400 Original-Received: by mail-io0-f169.google.com with SMTP id v36so1024684ioi.1; Fri, 29 Sep 2017 15:55:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=ncNbjkAFLknEIu+SfoJSCnaQ+M5Ep0PL3OW9iTLIJnk=; b=Xn054bLkQwOZoxyHg7N4AaXZlIu011GPBJ2Y5EQSRXPVBXvjg3n8kHwVwmsz3U4ABy g1vxfi8r5LIb0Kx/SSxQPNuwKg/z+D5rmo4F6gj/Gb6Qz73S8uw4pNw02X0in86hLB3Z CrIbYk+px/5rLA535RH/T9NYzATneQl7R959onm91JliDLeypi6F2Q5t1aS39tRI8JXp ufb3KMub0i0VxqQCxocobZIqAAHME+NqEx0D2Jazyph99pwZ1JscGNVBVdKBQzMxocKA 8281bIq6w5LaZ7D6pfxz2x9cGO6MTGCiEb4M/ZUyUp4iBUus5Ib2ceoMi8h08Y8xw+yo opcQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:cc:subject:references:date :in-reply-to:message-id:user-agent:mime-version; bh=ncNbjkAFLknEIu+SfoJSCnaQ+M5Ep0PL3OW9iTLIJnk=; b=Jk0dQuysp+UhUVPU8p6yUAkgxKHgwKMGd8pe9FDRbY4DJjO0unBetiU8crCJ4uZ4q0 8c4BCxohfHtlKKd7dEoneC9aZwd2bG8lPeVIHmi5iHt1NshRdeTQq5QcRyurDJBz+3kP jTzbfNU7y3JMEwiloDovpnA9UHLNeMJXE0WajR9aqmHamgleJVJ6PDRQQAmOM317+BqS hu/NfbQNbLkdqjY6G7heTAwRqyLcVINegl6WbbEzRlbZtoFQFHqPvnHPfSenoA5yXsG2 2HcIR+lyi8BGOGEDjBc0sMbQAElDGA1QyDej8RLuKsS/xiP3NpPbemLsVjjXOj4UR6Jg 7j+A== X-Gm-Message-State: AMCzsaX77Rk5EN0V98wpWE+aEOzir0cjIYZGSNkIGmrnQmGmt7UPsz4a aeF0hR9PM2MOIkJXgL4EPwr9Cg== X-Google-Smtp-Source: AOwi7QBxfFeebIgQvvCK5kvSyne0hmGnq5SFAbq2WPVOIft8uP53u1MV38OuZ+X+Aysc2Hi+7HpeDQ== X-Received: by 10.107.15.138 with SMTP id 10mr14415309iop.203.1506725715919; Fri, 29 Sep 2017 15:55:15 -0700 (PDT) Original-Received: from zebian ([45.2.119.34]) by smtp.googlemail.com with ESMTPSA id k76sm2300575ita.4.2017.09.29.15.55.14 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Fri, 29 Sep 2017 15:55:14 -0700 (PDT) In-Reply-To: (Glenn Morris's message of "Fri, 29 Sep 2017 12:41:26 -0400") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:137655 Archived-At: tags 28618 - unreproducible tags 28618 + notabug quit Glenn Morris writes: > On some systems, sudo may preserve HOME by default. Or it may be > optional behaviour with "sudo -E" (eg on Debian 8, it seems). Ah, that explains the discrepancy then (it's the same with Debian 9, which I'm using here). > Ref eg > > https://security.stackexchange.com/questions/18369/issues-with-preserving-home-on-sudo > > As it stands, I don't think this is an Emacs issue. I agree.