From mboxrd@z Thu Jan  1 00:00:00 1970
Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail
From: Stefan Monnier <monnier@iro.umontreal.ca>
Newsgroups: gmane.emacs.devel
Subject: Re: trusted-content seems to have effect only with sources specified.
Date: Mon, 30 Dec 2024 22:26:23 -0500
Message-ID: <jwvh66k4jxf.fsf-monnier+emacs@gnu.org>
References: <m2bjwx4nf2.fsf@gmail.com> <861pxty189.fsf@gnu.org>
 <m2y100k9up.fsf@gmail.com> <86ed1suoyt.fsf@gnu.org>
 <jwvzfkfamze.fsf-monnier+emacs@gnu.org> <m2o70vwrj8.fsf@gmail.com>
 <86zfkfr4m7.fsf@gnu.org> <m2jzbjwpm2.fsf@gmail.com>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214";
	logging-data="9463"; mail-complaints-to="usenet@ciao.gmane.io"
User-Agent: Gnus/5.13 (Gnus v5.13)
Cc: emacs-devel@gnu.org
To: Michelangelo Rodriguez <michelangelo.rodriguez@gmail.com>
Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Tue Dec 31 04:27:06 2024
Return-path: <emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org>
Envelope-to: ged-emacs-devel@m.gmane-mx.org
Original-Received: from lists.gnu.org ([209.51.188.17])
	by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org>)
	id 1tSSuP-0002Jr-Pb
	for ged-emacs-devel@m.gmane-mx.org; Tue, 31 Dec 2024 04:27:06 +0100
Original-Received: from localhost ([::1] helo=lists1p.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.90_1)
	(envelope-from <emacs-devel-bounces@gnu.org>)
	id 1tSSu5-0007w1-Pm; Mon, 30 Dec 2024 22:26:46 -0500
Original-Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <monnier@iro.umontreal.ca>)
 id 1tSStv-0007vV-Ix
 for emacs-devel@gnu.org; Mon, 30 Dec 2024 22:26:37 -0500
Original-Received: from mailscanner.iro.umontreal.ca ([132.204.25.50])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <monnier@iro.umontreal.ca>)
 id 1tSSts-00068O-S7
 for emacs-devel@gnu.org; Mon, 30 Dec 2024 22:26:35 -0500
Original-Received: from pmg2.iro.umontreal.ca (localhost.localdomain [127.0.0.1])
 by pmg2.iro.umontreal.ca (Proxmox) with ESMTP id A005E80357;
 Mon, 30 Dec 2024 22:26:29 -0500 (EST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=iro.umontreal.ca;
 s=mail; t=1735615584;
 bh=KfL+kBUOHMWT8twQiBlG4bA7NGA4x9XiiU0tDEgadus=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date:From;
 b=YqX5yZbCrVNA0j4i2Kin7VG0EB5TxEMlw3nd6tPNtSgazdBaT+EvcD6C1dv0aCCYS
 IBwSn+mcjhYQwNTOREFIUrtwz5l37okuR6TQA9qoT5qwkATvO99aYvJrzvW4MAgWNm
 8/k2IeLguPTCxwquuVjAhRXVPzIH8AbcYtIdV7F8zfpeLbFfuhgcmchtihK/4sNRkR
 zA3oBRNgbFZrGmGKASxwEsiYlrZK3dT4VTPmZLVfbA79/A6kAh3vcwrZst0yMS/B/9
 v0QLb3lOpmccfjNYWyP/dauuEVNGkJVrb0m4X0sV1Lxg7wx1kSi4WomEjUawl4W2vn
 5KrUQqDXXy43w==
Original-Received: from mail01.iro.umontreal.ca (unknown [172.31.2.1])
 by pmg2.iro.umontreal.ca (Proxmox) with ESMTP id A02DB805E9;
 Mon, 30 Dec 2024 22:26:24 -0500 (EST)
Original-Received: from pastel (104-195-225-43.cpe.teksavvy.com [104.195.225.43])
 by mail01.iro.umontreal.ca (Postfix) with ESMTPSA id 7282612028D;
 Mon, 30 Dec 2024 22:26:24 -0500 (EST)
In-Reply-To: <m2jzbjwpm2.fsf@gmail.com> (Michelangelo Rodriguez's message of
 "Sat, 28 Dec 2024 20:53:57 +0100")
Received-SPF: pass client-ip=132.204.25.50;
 envelope-from=monnier@iro.umontreal.ca; helo=mailscanner.iro.umontreal.ca
X-Spam_score_int: -42
X-Spam_score: -4.3
X-Spam_bar: ----
X-Spam_report: (-4.3 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3,
 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001,
 SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-BeenThere: emacs-devel@gnu.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Emacs development discussions." <emacs-devel.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/emacs-devel>,
 <mailto:emacs-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <https://lists.gnu.org/archive/html/emacs-devel>
List-Post: <mailto:emacs-devel@gnu.org>
List-Help: <mailto:emacs-devel-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/emacs-devel>,
 <mailto:emacs-devel-request@gnu.org?subject=subscribe>
Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org
Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org
Xref: news.gmane.io gmane.emacs.devel:327474
Archived-At: <http://permalink.gmane.org/gmane.emacs.devel/327474>

>> Isn't it obvious that trust should be given to actual files and
>> directories, not links to them?
> Yes, what is not obvious is to think that the problem is caused by
> symbolic links

Currently the error/warning message states the name of the buffer
(which is better because the trust can depend on other things than the
name of the associated file), but it would be helpful to include the
`buffer-file-truename` in the message to guide the user to the right
file/dir name to add to `trusted-content`.

Arguably, in many cases a better UI would be a bit like for
file/dir-local vars where we prompt the user whether to trust or not,
and if yes, whether to do it permanently (i.e. to add an entry to
`trusted-content` and `custom-save` the result).


        Stefan