From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.devel Subject: Re: GStreamer xwidget Date: Thu, 25 Nov 2021 00:32:57 -0500 Message-ID: References: <87ee7cq2mu.fsf.ref@yahoo.com> <87ee7cq2mu.fsf@yahoo.com> <87zgpzp80c.fsf@yahoo.com> <87czmvtf68.fsf@gnus.org> <87czmunkmo.fsf@yahoo.com> <8735noajkl.fsf@yahoo.com> <87sfvn5p0j.fsf@yahoo.com> <87v90i4cmc.fsf@yahoo.com> Reply-To: rms@gnu.org Content-Type: text/plain; charset=Utf-8 Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="13220"; mail-complaints-to="usenet@ciao.gmane.io" Cc: larsi@gnus.org, emacs-devel@gnu.org To: Po Lu Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Thu Nov 25 06:34:58 2021 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mq7PN-0003Eg-JA for ged-emacs-devel@m.gmane-mx.org; Thu, 25 Nov 2021 06:34:57 +0100 Original-Received: from localhost ([::1]:56950 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mq7PM-0003s2-6Q for ged-emacs-devel@m.gmane-mx.org; Thu, 25 Nov 2021 00:34:56 -0500 Original-Received: from eggs.gnu.org ([209.51.188.92]:36194) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mq7NR-0002DF-V3 for emacs-devel@gnu.org; Thu, 25 Nov 2021 00:32:58 -0500 Original-Received: from [2001:470:142:3::e] (port=57652 helo=fencepost.gnu.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mq7NR-0000i5-D1; Thu, 25 Nov 2021 00:32:57 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=Date:References:Subject:In-Reply-To:To:From: mime-version; bh=kpZLLRBobsvFxkbWTlbkD/H2rZmIcUwDovp/8HwTY/o=; b=ecVtRzDKM31S Tt2SKKZaySWAmlq80p+HosiiOHeUzguhRppRYlSeqII6q5cocTvqtlOJeiodOA7NnwhXPCInvGemV TRN5gr+wZeJ44FMdpdtiabx8JluQmhgY6X+Arc6OuI2Y6v+D6f1XTgRf9QX6OIHiZQtb688BLizWo fNmfuS/hwJ9syA5/wTSSlV6lepMpKz9ftOgIRlMMIl2nr34U83DLTR+uuefqQkvP1FprGX2yodiKM 7+Ox+Qr7LIhe8dbD5J66T2D8z3kmsTmsYMMrUnyCVbmc5r6oGrIlU7F2bQPhSLtNCJ+oAGTXgsrfz 3WmpZ0Jy1DD/vTn7vt+y3w==; Original-Received: from rms by fencepost.gnu.org with local (Exim 4.90_1) (envelope-from ) id 1mq7NR-00075h-BL; Thu, 25 Nov 2021 00:32:57 -0500 In-Reply-To: <87v90i4cmc.fsf@yahoo.com> (message from Po Lu on Wed, 24 Nov 2021 08:32:27 +0800) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:280067 Archived-At: [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > How does the program control which set of plug-ins are permitted? > As GStreamer doesn't load plugins by yourself, you do so by making sure > to only pass good plugin names to the element factory. We're starting to close in on the crucial point. Can you show me the code Emacs would use to control which plug-ins are permitted? In other words, how does a program "pass plug-in names" to the element factory? Does the program need to pass the list of good plug-in names? If so, how does it get that list, and from where? I'm trying to do a kind of security analysis of this. Does passing the right list of plug-in names depend on the cooperation of other projects? If so, which ones, and how would Emacs interact with them? I want to make sure we are not volunerable to misbehavior on their part. If we'd need to trust some people, who are they, and what concretely would we need to trust them to do? -- Dr Richard Stallman (https://stallman.org) Chief GNUisance of the GNU Project (https://gnu.org) Founder, Free Software Foundation (https://fsf.org) Internet Hall-of-Famer (https://internethalloffame.org)