From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.devel Subject: Re: Easy configuration of a site-lisp directory Date: Sat, 21 Aug 2021 22:18:28 +0300 Message-ID: <83r1emy5bv.fsf@gnu.org> References: <87y29cj65y.fsf@posteo.net> <871r6pu6pc.fsf@posteo.net> <87v941hz9o.fsf@posteo.net> <83sfz3z4gm.fsf@gnu.org> <831r6mzwov.fsf@gnu.org> Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="27622"; mail-complaints-to="usenet@ciao.gmane.io" Cc: philipk@posteo.net, monnier@iro.umontreal.ca, emacs-devel@gnu.org To: Arthur Miller Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Sat Aug 21 21:19:34 2021 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mHWWk-00071l-9h for ged-emacs-devel@m.gmane-mx.org; Sat, 21 Aug 2021 21:19:34 +0200 Original-Received: from localhost ([::1]:39330 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mHWWj-000681-0n for ged-emacs-devel@m.gmane-mx.org; Sat, 21 Aug 2021 15:19:33 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:45402) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mHWVw-0005Ti-89 for emacs-devel@gnu.org; Sat, 21 Aug 2021 15:18:44 -0400 Original-Received: from fencepost.gnu.org ([2001:470:142:3::e]:54072) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mHWVv-0002JI-Gw; Sat, 21 Aug 2021 15:18:43 -0400 Original-Received: from 84.94.185.95.cable.012.net.il ([84.94.185.95]:2873 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mHWVv-0000Gk-38; Sat, 21 Aug 2021 15:18:43 -0400 In-Reply-To: (message from Arthur Miller on Sat, 21 Aug 2021 21:10:22 +0200) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:272801 Archived-At: > From: Arthur Miller > Cc: monnier@iro.umontreal.ca, philipk@posteo.net, emacs-devel@gnu.org > Date: Sat, 21 Aug 2021 21:10:22 +0200 > > > If the symlink resolution is done below the level where access rights > > are checked, you cannot do that. > > Which means we can leak access rights if we symlink from priviledged > ring into lesser access right ring, or how they call it? Something like that, yes. I think the problem is actually in knowing which inheritable access right to apply, because a symlink can point to a completely different directory hierarchy. > > Symlinks are not removed from Windows, they are present (and Emacs on > > Windows supports them). > Oh sorry for the last, my brain was on the vacation, "removed" I meant > from original design ... back in VMS/VAX time I was still in thoughts of > another replay. As I understand they added symlinks "relatively" > recently (in Vista), but I maybe missunderstood there. Yes, NTFS support for symlinks is around Vista, although filesystem reparse points were supported before that.