From mboxrd@z Thu Jan 1 00:00:00 1970 Path: main.gmane.org!not-for-mail From: Reiner Steib <4.uce.03.r.s@nurfuerspam.de> Newsgroups: gmane.emacs.devel Subject: Re: Possible problem with Gnus Date: Tue, 11 May 2004 18:07:29 +0200 Organization: Dept. of Theoretical Physics, University of Ulm Sender: emacs-devel-bounces+emacs-devel=quimby.gnus.org@gnu.org Message-ID: References: <20040509230720.GB20485@fencepost> Reply-To: Reiner Steib NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1084291812 4118 80.91.224.253 (11 May 2004 16:10:12 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Tue, 11 May 2004 16:10:12 +0000 (UTC) Cc: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+emacs-devel=quimby.gnus.org@gnu.org Tue May 11 18:09:57 2004 Return-path: Original-Received: from quimby.gnus.org ([80.91.224.244]) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 1BNZpN-0002a1-00 for ; Tue, 11 May 2004 18:09:57 +0200 Original-Received: from monty-python.gnu.org ([199.232.76.173]) by quimby.gnus.org with esmtp (Exim 3.35 #1 (Debian)) id 1BNZpM-00082h-00 for ; Tue, 11 May 2004 18:09:57 +0200 Original-Received: from localhost ([127.0.0.1] helo=monty-python.gnu.org) by monty-python.gnu.org with esmtp (Exim 4.34) id 1BNZoK-0002rY-Pk for emacs-devel@quimby.gnus.org; Tue, 11 May 2004 12:08:52 -0400 Original-Received: from list by monty-python.gnu.org with tmda-scanned (Exim 4.34) id 1BNZnh-0002q3-IH for emacs-devel@gnu.org; Tue, 11 May 2004 12:08:13 -0400 Original-Received: from mail by monty-python.gnu.org with spam-scanned (Exim 4.34) id 1BNZn3-0002hP-5h for emacs-devel@gnu.org; Tue, 11 May 2004 12:08:08 -0400 Original-Received: from [134.60.10.173] (helo=lumberjack.physik.uni-ulm.de) by monty-python.gnu.org with esmtp (Exim 4.34) id 1BNZn2-0002h3-7F; Tue, 11 May 2004 12:07:32 -0400 Original-Received: by lumberjack.physik.uni-ulm.de (Postfix, from userid 170) id 4F9AC18165; Tue, 11 May 2004 18:07:29 +0200 (CEST) Original-To: Richard Stallman Original-Newsgroups: gmane.emacs.devel X-Face: 3Phac&+dw=IZHjhua]bp}LH<*p{qzj8u+ List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+emacs-devel=quimby.gnus.org@gnu.org Xref: main.gmane.org gmane.emacs.devel:23153 X-Report-Spam: http://spam.gmane.org/gmane.emacs.devel:23153 [ The following message is a courtesy copy of an article that has been posted to news:gmane.emacs.devel as well. ] On Tue, May 11 2004, Richard Stallman wrote: > We have to pay attention to an issue of how Gnus and other Emacs mail > readers treat MIME attachments. > > Windows viruses often spread in attachments for Word. We have to make > sure that attachments don't become a method for spreading viruses in > Emacs. Some kinds of attachments run applications that perhaps can be > assumed safe, such as a gif displayer. But attachments that run more > complex attachments, such as a browser that might execute programs > given it, have to be treated as unsafe. I agree with Stefan and David that Gnus is pretty safe in this respect. > How does a Gnus user specify to display an attachment? For types that cannot displayed inline in Emacs, a buttons is created, e.g. "[4. application/pdf; foo.pdf]". To display the attachment, the user has to press RET or mouse-2 on this button. The viewer used to display the attachment is usually determined by parsing the mailcap file(s), if present. Additionally, Gnus has an internal list of viewers, see `mailcap-mime-data' in `mailcap.el'[1]. Those viewers are designed to be as safe as possible. Quoting from the emacs-mime manual[2] (from Gnus 5.10): "When you launch an attachment through mailcap an attempt is made to use a safe viewer with the safest options--this isn't the case if you save it to disk and launch it in a different way (command line or double-clicking)." E.g. xdvi is launched as "xdvi -safer %s". > Does the user do this for one specific attachment, or for all the > attachments in one message? It is customizable based on the MIME type, i.e. different types of attachment are treated differently. > Does Gnus ever display attachments in a message without a specific > direct user request for that message? By default, only types that can displayed inline in Emacs are displayed automatically, i.e. without a specific user request. But the user can also changes this so that in principle, it can become unsafe (but this risk is also present e.g. if the user sets `enable-local-eval' to t). AFAIK, you had a discussion with Florian Weimer about MIME security in Gnus after your message[3] about "Windows viruses and GNU/Linux" on gnu.announce. As a result of discussing this issue on the Gnus list[4], I have installed a variable `mm-enable-external'[2] in Gnus 5.10.5. Setting `mm-enable-external' to `nil' disables the use of external program through MIME completely. But we decided not to do this by default because using the programs from mailcap usually is safer (as explained above and in [2]) as by saving to file and starting the viewer from the command line. (A related variable, e.g. for uuencoded messages is `gnus-article-emulate-mime'[5].) Bye, Reiner. [1] (info "(emacs-mime)mailcap") [2] ,----[ (info "(emacs-mime)Display Customization") ] | `mm-enable-external' | Indicate whether external MIME handlers should be used. | | If `t', all defined external MIME handlers are used. If `nil', | files are saved to disk (`mailcap-save-binary-file'). If it is | the symbol `ask', you are prompted before the external MIME | handler is invoked. | | When you launch an attachment through mailcap (*note mailcap::) an | attempt is made to use a safe viewer with the safest options--this | isn't the case if you save it to disk and launch it in a different | way (command line or double-clicking). Anyhow, if you want to be | sure not to launch any external programs, set this variable to | `nil' or `ask'. `---- [3] ,----[ ] | From: Richard Stallman | Subject: Windows viruses and GNU/Linux | Newsgroups: gnu.announce | To: info-gnu@gnu.org | Date: Sun, 24 Aug 2003 23:30:22 -0400 `---- [4] ,----[ ] | From: Florian Weimer | Subject: Disable mailcap support | Newsgroups: gmane.emacs.gnus.general | Date: Sun Sep 28 18:11:39 2003 +0200 | Original-To: ding@gnus.org `---- [5] ,----[ (info "(gnus)MIME Commands") ] | `gnus-article-emulate-mime' | There are other, non-MIME encoding methods used. The most common | is `uuencode', but yEncode is also getting to be popular. If this | variable is non-`nil', Gnus will look in message bodies to see if | it finds these encodings, and if so, it'll run them through the | Gnus MIME machinery. The default is `t'. `---- -- ,,, (o o) ---ooO-(_)-Ooo--- PGP key available via WWW http://rsteib.home.pages.de/