From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Stefan Monnier via "Bug reports for GNU Emacs, the Swiss army knife of text editors" Newsgroups: gmane.emacs.bugs Subject: bug#75017: 31.0.50; Untrusted user lisp files Date: Sat, 28 Dec 2024 09:57:24 -0500 Message-ID: References: <87bjx43gp7.fsf@pub.pink> <86frmg6xzf.fsf@gnu.org> <86ldw75zrd.fsf@gnu.org> <9a4969f4-858e-4493-a69f-8ca9b2861917@gutov.dev> <868qs75uwp.fsf@gnu.org> <36eb8d61-cf0c-4ac9-a679-252a46a874ee@gutov.dev> <865xna60oj.fsf@gnu.org> <4ff33026-e509-41d0-8d02-e67db644a797@gutov.dev> <87ed1tpobf.fsf@zephyr.silentflame.com> Reply-To: Stefan Monnier Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="8123"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Cc: Dmitry Gutov , Eli Zaretskii , jm@pub.pink, stefankangas@gmail.com, 75017@debbugs.gnu.org To: Sean Whitton Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Sat Dec 28 15:58:23 2024 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1tRYGk-0001y5-Ml for geb-bug-gnu-emacs@m.gmane-mx.org; Sat, 28 Dec 2024 15:58:22 +0100 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tRYGS-0006Cu-VT; Sat, 28 Dec 2024 09:58:05 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tRYGR-0006Cl-Aj for bug-gnu-emacs@gnu.org; Sat, 28 Dec 2024 09:58:03 -0500 Original-Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tRYGQ-0006s4-Qt for bug-gnu-emacs@gnu.org; Sat, 28 Dec 2024 09:58:03 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:References:In-Reply-To:From:To:Subject; bh=Su3UC9RnGy4NLv8cG5cOWsTAgloyT1z1GPb2WrGD4QI=; b=SFM+8eaaeXN4ehBMqDIeqtN29NlE3FevDqhQhfTZqwqWjgAqOvckfR++TpN5npfBi/8cdiwsVBxe3UT3KmdG75bGjH4DLDaKBj/AynupI/r7FnC+397eecgn1o40CZzB3aarUilacJbQo0u29CTzu9Be4ZMWzeTboaRi5+IXGZZqevrI3C3yq65Qa5Rw0MHPafJXBZkL6LvVDgMPk2f4EPXu/CdpXJdM1yff8Rm+UWt6pmeBK88plV3NXp0ZCYjk0/maC/emXYjB2U0Hqngx7thnxJ7n5rt+SYhmN6ggzTLdDOhYN2SASPs/ti1BoJvH3YNwzh+D9pNQbLYd9SRSbA==; Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1tRYGQ-0001K7-Ji for bug-gnu-emacs@gnu.org; Sat, 28 Dec 2024 09:58:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Stefan Monnier Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sat, 28 Dec 2024 14:58:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 75017 X-GNU-PR-Package: emacs Original-Received: via spool by 75017-submit@debbugs.gnu.org id=B75017.17353978555063 (code B ref 75017); Sat, 28 Dec 2024 14:58:02 +0000 Original-Received: (at 75017) by debbugs.gnu.org; 28 Dec 2024 14:57:35 +0000 Original-Received: from localhost ([127.0.0.1]:52260 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tRYFy-0001Jb-Vg for submit@debbugs.gnu.org; Sat, 28 Dec 2024 09:57:35 -0500 Original-Received: from mailscanner.iro.umontreal.ca ([132.204.25.50]:25180) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tRYFw-0001JR-DU for 75017@debbugs.gnu.org; Sat, 28 Dec 2024 09:57:33 -0500 Original-Received: from pmg3.iro.umontreal.ca (localhost [127.0.0.1]) by pmg3.iro.umontreal.ca (Proxmox) with ESMTP id 5045F44105C; Sat, 28 Dec 2024 09:57:26 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=iro.umontreal.ca; s=mail; t=1735397845; bh=+iJLstp7nDn4Zrx45NsEYg+N4gHuFt2eigcElmZRntY=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=jTB/5Iven59HkCdQdkcdoPfJGo+WhhfWjNLBGhmyiiW9Il6asFl682hSmMKIIlL4P xt5SIHmxplQRpQOT8RDk6WL3X8jyU9h4SpklKxcXaBWb28GbagTjkhYJOOzK2pkB4h ZibtyDtnRKtt2yngqcTtjWrNl3MaJQ3GTSwa6a70MwbBdnqdy2vBh278qvsXShxmwj Wc4dUa+ii0ltsaJAsoWZamENaCmEkSjdkglsPVqVyd6bsO7tbKl9ki6rc9Xo3qYxQX ymfqwo2+iToHYvQOQTzcvm+khgjanIwfkxB5HKMeG7Drx0WfDGvk5QKEJM9BHKELv6 sW5F6YfymDbCA== Original-Received: from mail01.iro.umontreal.ca (unknown [172.31.2.1]) by pmg3.iro.umontreal.ca (Proxmox) with ESMTP id 67927441001; Sat, 28 Dec 2024 09:57:25 -0500 (EST) Original-Received: from pastel (104-195-225-43.cpe.teksavvy.com [104.195.225.43]) by mail01.iro.umontreal.ca (Postfix) with ESMTPSA id 2642112056E; Sat, 28 Dec 2024 09:57:25 -0500 (EST) In-Reply-To: <87ed1tpobf.fsf@zephyr.silentflame.com> (Sean Whitton's message of "Fri, 27 Dec 2024 07:39:16 +0000") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:297907 Archived-At: > For Debian we'll probably patch in so everything that we install on > the system is automatically trusted. Sounds fine, yes. > It seems natural to me to see this as the > distributor's responsibility. Agreed. Anything that we know has been installed consciously by the sysadmin should be trustworthy because we don't really get to choose not to trust the sysadmin, Stefan