From: Stefan Monnier <monnier@iro.umontreal.ca>
To: Eli Zaretskii <eliz@gnu.org>
Cc: emacs-pretest-bug@gnu.org, 865@emacsbugs.donarmstrong.com
Subject: bug#865: 23.0.60; The directory is unsafe today
Date: Sun, 07 Sep 2008 23:33:28 -0400 [thread overview]
Message-ID: <jwv4p4rl3eo.fsf-monnier+emacsbugreports@gnu.org> (raw)
In-Reply-To: <uabejerg4.fsf@gnu.org> (Eli Zaretskii's message of "Sun, 07 Sep 2008 21:33:47 +0300")
> This is impossible on Windows, AFAIK. There are special flags to the
> syscall that opens a file or directory that can bypass any denied
> rights to enter a directory or open a file. (These flags allegedly
> exist so that system backup and restore programs could DTRT without
> running as a privileged user.)
Are you saying that anybody can read any file (or dir) simply by using
those extra flags when they open those files and dirs? So there's no
possible privacy between users on the same machine? If so, we may just
stop to worry about server-ensure-safe-dir under w32 since there's
simply no way for it to be safe (short of encrypting it, which implies
a fairly different UI).
Stefan
next prev parent reply other threads:[~2008-09-08 3:33 UTC|newest]
Thread overview: 87+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-09-02 16:05 bug#865: 23.0.60; The directory is unsafe today Lennart Borgman (gmail)
2008-09-02 17:16 ` Jason Rumney
2008-09-02 18:06 ` Lennart Borgman (gmail)
2008-09-02 18:41 ` Eli Zaretskii
2008-09-02 19:10 ` Lennart Borgman (gmail)
2008-09-02 19:31 ` Eli Zaretskii
2008-09-02 19:37 ` Lennart Borgman (gmail)
2008-09-02 22:38 ` Juanma Barranquero
2008-09-02 22:40 ` Lennart Borgman (gmail)
2008-09-02 22:42 ` Juanma Barranquero
2008-09-02 23:01 ` Lennart Borgman (gmail)
2008-09-02 23:06 ` Juanma Barranquero
2008-09-02 23:11 ` Lennart Borgman (gmail)
2008-09-02 23:17 ` Juanma Barranquero
2008-09-02 23:19 ` Lennart Borgman (gmail)
2008-09-02 23:25 ` Juanma Barranquero
2008-09-02 23:27 ` Lennart Borgman (gmail)
2008-09-02 23:38 ` Juanma Barranquero
2008-09-02 23:41 ` Lennart Borgman (gmail)
2008-09-02 23:44 ` Juanma Barranquero
2008-09-02 23:50 ` Lennart Borgman (gmail)
2008-09-02 23:52 ` Juanma Barranquero
2008-09-02 23:58 ` Lennart Borgman (gmail)
2008-09-03 0:00 ` Juanma Barranquero
2008-09-03 0:05 ` Lennart Borgman (gmail)
2008-09-03 16:29 ` Stefan Monnier
2008-09-03 16:35 ` Lennart Borgman (gmail)
2008-09-03 18:05 ` Stefan Monnier
2008-09-03 18:57 ` Eli Zaretskii
2008-09-03 18:13 ` Eli Zaretskii
2008-09-02 19:19 ` Eli Zaretskii
2008-09-02 23:50 ` Jason Rumney
2008-09-03 3:27 ` Eli Zaretskii
2008-09-03 18:31 ` Eli Zaretskii
2008-09-03 23:44 ` Jason Rumney
2008-09-04 0:16 ` Lennart Borgman (gmail)
2008-09-04 3:22 ` Eli Zaretskii
2008-09-04 3:30 ` Jason Rumney
2008-09-04 16:10 ` Eli Zaretskii
2008-09-04 22:51 ` Jason Rumney
2008-09-05 10:21 ` Eli Zaretskii
2008-09-05 3:11 ` Stefan Monnier
2008-09-05 10:52 ` Eli Zaretskii
2008-09-05 13:16 ` Stefan Monnier
2008-09-05 15:11 ` Eli Zaretskii
2008-09-05 21:36 ` Stefan Monnier
2008-09-06 7:08 ` Eli Zaretskii
2008-09-06 19:45 ` Stefan Monnier
2008-09-06 21:38 ` Eli Zaretskii
2008-09-07 3:43 ` Stefan Monnier
2008-09-07 18:33 ` Eli Zaretskii
2008-09-08 3:33 ` Stefan Monnier [this message]
2008-09-08 3:40 ` Jason Rumney
2008-09-08 11:25 ` Stefan Monnier
2008-09-08 20:08 ` Eli Zaretskii
2008-09-09 14:37 ` Stefan Monnier
2008-09-09 18:52 ` Eli Zaretskii
2008-09-10 16:32 ` Stefan Monnier
[not found] ` <mailman.18638.1220760463.18990.bug-gnu-emacs@gnu.org>
2008-09-07 15:44 ` Francis Litterio
2008-09-07 17:36 ` Lennart Borgman (gmail)
2008-09-07 18:41 ` Eli Zaretskii
[not found] ` <mailman.18580.1220686060.18990.bug-gnu-emacs@gnu.org>
2008-09-06 17:04 ` Francis Litterio
2008-09-06 17:41 ` Lennart Borgman (gmail)
2008-09-05 13:18 ` Lennart Borgman
2008-09-05 14:27 ` Eli Zaretskii
2008-09-05 15:34 ` Stefan Monnier
2008-09-05 17:19 ` Eli Zaretskii
2008-09-05 14:28 ` Jason Rumney
2008-09-05 15:16 ` Lennart Borgman
2008-09-05 17:13 ` Eli Zaretskii
[not found] ` <mailman.18384.1220500061.18990.bug-gnu-emacs@gnu.org>
2008-09-04 15:56 ` Francis Litterio
2008-09-04 17:40 ` Eli Zaretskii
[not found] ` <mailman.18443.1220551657.18990.bug-gnu-emacs@gnu.org>
2008-09-04 18:08 ` Francis Litterio
2008-09-05 9:54 ` Eli Zaretskii
2008-09-05 10:29 ` Lennart Borgman
2008-09-04 22:46 ` Jason Rumney
2008-09-04 23:17 ` Lennart Borgman (gmail)
2008-09-04 23:25 ` Lennart Borgman (gmail)
2008-09-05 10:32 ` Eli Zaretskii
[not found] ` <mailman.18512.1220611660.18990.bug-gnu-emacs@gnu.org>
2008-09-05 14:23 ` Francis Litterio
2008-09-05 17:12 ` Eli Zaretskii
[not found] ` <mailman.18547.1220635661.18990.bug-gnu-emacs@gnu.org>
2008-09-05 20:29 ` Francis Litterio
2008-09-06 1:30 ` Lennart Borgman (gmail)
[not found] ` <mailman.18565.1220665659.18990.bug-gnu-emacs@gnu.org>
2008-09-06 3:33 ` Francis Litterio
2008-09-06 11:44 ` Eli Zaretskii
2017-09-24 21:25 ` Noam Postavsky
2017-10-21 19:56 ` Noam Postavsky
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.gnu.org/software/emacs/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=jwv4p4rl3eo.fsf-monnier+emacsbugreports@gnu.org \
--to=monnier@iro.umontreal.ca \
--cc=865@emacsbugs.donarmstrong.com \
--cc=eliz@gnu.org \
--cc=emacs-pretest-bug@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).