From mboxrd@z Thu Jan 1 00:00:00 1970 Path: main.gmane.org!not-for-mail From: Colin Walters Newsgroups: gmane.emacs.devel Subject: Re: many packages write to `temporary-file-directory' insecurely Date: 18 Mar 2002 17:36:23 -0500 Sender: emacs-devel-admin@gnu.org Message-ID: <1016490983.17157.4.camel@space-ghost> References: <1014945351.23435.102.camel@space-ghost> <1015103550.7365.17.camel@space-ghost> <200203031718.g23HIKt23295@rum.cs.yale.edu> <200203042340.g24NexL00497@aztec.santafe.edu> <200203051520.g25FKbw01899@rum.cs.yale.edu> <1015389617.25883.37.camel@space-ghost> <1015400126.18074.0.camel@space-ghost> <200203080908.g28986Z02524@wijiji.santafe.edu> <1015757200.18074.71.camel@space-ghost> <200203110901.g2B91Ej04386@wijiji.santafe.edu> <1016402881.5455.24.camel@space-ghost> <200203182006.g2IK6dB08697@wijiji.santafe.edu> NNTP-Posting-Host: localhost.gmane.org Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Trace: main.gmane.org 1016506099 11090 127.0.0.1 (19 Mar 2002 02:48:19 GMT) X-Complaints-To: usenet@main.gmane.org NNTP-Posting-Date: Tue, 19 Mar 2002 02:48:19 +0000 (UTC) Original-Received: from quimby.gnus.org ([80.91.224.244]) by main.gmane.org with esmtp (Exim 3.33 #1 (Debian)) id 16n9ff-0002sm-00 for ; Tue, 19 Mar 2002 03:48:19 +0100 Original-Received: from fencepost.gnu.org ([199.232.76.164]) by quimby.gnus.org with esmtp (Exim 3.12 #1 (Debian)) id 16n9kk-0000wd-00 for ; Tue, 19 Mar 2002 03:53:35 +0100 Original-Received: from localhost ([127.0.0.1] helo=fencepost.gnu.org) by fencepost.gnu.org with esmtp (Exim 3.34 #1 (Debian)) id 16n5pV-0000JA-00; Mon, 18 Mar 2002 17:42:13 -0500 Original-Received: from monk.debian.net ([216.185.54.61] helo=monk.verbum.org) by fencepost.gnu.org with esmtp (Exim 3.34 #1 (Debian)) id 16n5o1-00009n-00 for ; Mon, 18 Mar 2002 17:40:41 -0500 Original-Received: from space-ghost.verbum.private (freedom.cis.ohio-state.edu [164.107.60.183]) (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)) (Client CN "space-ghost.verbum.org", Issuer "monk.verbum.org" (verified OK)) by monk.verbum.org (Postfix (Debian/GNU)) with ESMTP id 60C8574000A0 for ; Mon, 18 Mar 2002 17:40:27 -0500 (EST) Original-Received: by space-ghost.verbum.private (Postfix (Debian/GNU), from userid 1000) id 8AA2B8085A9; Mon, 18 Mar 2002 17:36:23 -0500 (EST) Original-To: emacs-devel@gnu.org In-Reply-To: <200203182006.g2IK6dB08697@wijiji.santafe.edu> X-Mailer: Evolution/1.0 (Preview Release) Errors-To: emacs-devel-admin@gnu.org X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.0.5 Precedence: bulk List-Help: List-Post: List-Subscribe: , List-Id: Emacs development discussions. List-Unsubscribe: , List-Archive: Xref: main.gmane.org gmane.emacs.devel:2024 X-Report-Spam: http://spam.gmane.org/gmane.emacs.devel:2024 On Mon, 2002-03-18 at 15:06, Richard Stallman wrote: > My gut feeling is that it really would be best to go with > ~/.emacs.d/games or so. > > That means users do not see each others' scores. > I think this is a mistake. I was talking with some Debian hackers on IRC about this problem, and one of them suggested a setgid helper program, sort of like movemail. This seems to me to be the best solution. We could give it arguments like: /usr/lib/emacs/21.3/update-score --file=/var/games/emacs/snake-scores --add-score "Jane Hacker 12345 points" And we should probably impose a limit of, say, 50 scores, and 200 characters in a score line. One problem with this is I have no idea what should be done on Windows; I guess we can not care about that for now though. Any thoughts/objections regarding this solution? _______________________________________________ Emacs-devel mailing list Emacs-devel@gnu.org http://mail.gnu.org/mailman/listinfo/emacs-devel