From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: =?UTF-8?Q?Cl=c3=a9ment_Pit-Claudel?= Newsgroups: gmane.emacs.devel Subject: Re: Closing a privilege escalation Date: Fri, 27 Apr 2018 10:29:40 -0400 Message-ID: <6cf66d99-00ab-33d7-5dfe-f9d2d0ad28cf@gmail.com> References: <87sh7hkmg1.fsf@mbork.pl> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Trace: blaine.gmane.org 1524839321 14114 195.159.176.226 (27 Apr 2018 14:28:41 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Fri, 27 Apr 2018 14:28:41 +0000 (UTC) User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri Apr 27 16:28:37 2018 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fC4MR-0003KG-D3 for ged-emacs-devel@m.gmane.org; Fri, 27 Apr 2018 16:28:32 +0200 Original-Received: from localhost ([::1]:48482 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fC4OS-0002fy-Ty for ged-emacs-devel@m.gmane.org; Fri, 27 Apr 2018 10:30:36 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:43000) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fC4Nb-0002f4-Rq for emacs-devel@gnu.org; Fri, 27 Apr 2018 10:29:44 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fC4Nb-0007KV-4T for emacs-devel@gnu.org; Fri, 27 Apr 2018 10:29:43 -0400 Original-Received: from mail-qk0-x22c.google.com ([2607:f8b0:400d:c09::22c]:37313) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fC4Nb-0007KR-0H for emacs-devel@gnu.org; Fri, 27 Apr 2018 10:29:43 -0400 Original-Received: by mail-qk0-x22c.google.com with SMTP id d74so1514227qkg.4 for ; Fri, 27 Apr 2018 07:29:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=26AU2YypSdcAf7PL/zumAUAhg1dy3kSE9azvTfqCmgM=; b=A0OZsjcdEYNS+RtfSi/T3cJFrlSSErE6uvvdzajrb/I48s3BTh7i9hmA9E4+6ujk3c htPhsT5Zs3W5C/3qQaQKUaPg4U/bN+TG3mWqdkLtBeMNkkjZNp+A7OLChpgEXxeajGZ3 VPrah2Ww4c4/cR0Q1xO+KEK3CfJQMZ6hWMd93QWp8F8Wvh1i7njZ04u+Iso2grQ+AtaC x5ajwH8HoeY7tPh7o04SCoXEtyzrsPeyiUY4vXeEa9iV32YA0Hj3NE1uSnIjz9XAJ1Mw z8hK0KcDF84z2ptJq0jyD1O1MWtt2I+1PfuotnVWCpC+2LceFokAQxE1ZH4j/R8kwXD6 lG9A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=26AU2YypSdcAf7PL/zumAUAhg1dy3kSE9azvTfqCmgM=; b=VvSDSO5HVqcFkOiGzLjtEillbTze7kzehAX3h0SEdkIY/kkeXdOtlu7FkpcuxslYlK dUhOkrs+PUrsVbdwCyITdZl5cRWKf+YU4NsntQVxkyc38om8C0Z4LLSQQRyCWCFBwJ1N 2b2KPolNfi5UqjmX0n66Ls175r2VUVfeHboswslGZVr/jviYjxJ4R4jZp4/wdGZUkvZK fzJx+aUeFdDIBhSMuS1wkGtuaGKV7A1w/4Z6DxbP5kjnehQju7G86wyZfyTcECXQBO1J k6FShyaf0oEdNBc1xU2t63343w0FXMDA+Fya0jQ8uvg/KESAw0FFlTtdaDxUJFY7sLuN n+WQ== X-Gm-Message-State: ALQs6tAp34eDAxzdCzIO5QZyUTknUnolEA7N9CHudp/MhT9rnwpj6yml 6tLnyPvaTqLjjJiPb6ZO0/aacHp3 X-Google-Smtp-Source: AB8JxZqh3va3Fm/uxXculstgaeWOpiJELJJ+bi+ezlS9hIfcd+t60OJz7DUWA/8+QNgpNYDHN+cNtg== X-Received: by 10.55.164.85 with SMTP id n82mr1992728qke.230.1524839382296; Fri, 27 Apr 2018 07:29:42 -0700 (PDT) Original-Received: from ?IPv6:2601:184:4180:66e7:8545:f369:32fd:52a7? ([2601:184:4180:66e7:8545:f369:32fd:52a7]) by smtp.gmail.com with ESMTPSA id a4sm994661qkc.83.2018.04.27.07.29.41 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 27 Apr 2018 07:29:41 -0700 (PDT) In-Reply-To: <87sh7hkmg1.fsf@mbork.pl> Content-Language: en-GB X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2607:f8b0:400d:c09::22c X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:224920 Archived-At: On 2018-04-27 05:50, Marcin Borkowski wrote: > On 2018-04-26, at 23:05, Richard Stallman wrote: > >> to arrange to take advantage later. One way is by editing .emacs >> so that it will do something bad next time the user runs Emacs under sudo. > > Out of curiosity: why would anyone run Emacs under sudo? Shouldn't it > be disabled? (Possibly, there might be option, called > e.g. --i-explicitly-do-ask-for-troubles, which could enable that.) Force of habit, I guess. I know about TRAMP's sudo method and I sometimes use it, but for quick edits I often just use sudo emacs /etc/apt/sources.list, for example.