From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Lars Ingebrigtsen Newsgroups: gmane.emacs.devel Subject: Re: master 3d38d1d: Add sqlite3 support to Emacs Date: Tue, 14 Dec 2021 11:27:31 +0100 Message-ID: <87h7bbqy5o.fsf@gnus.org> References: <20211211035614.15517.53830@vcs0.savannah.gnu.org> <20211211035616.984DD20A0A@vcs0.savannah.gnu.org> <87ee6j4ty4.fsf@yahoo.com> <8735mz4o70.fsf@yahoo.com> <83k0gbr0dm.fsf@gnu.org> <87y24r33bn.fsf@yahoo.com> <87ilvu1ldh.fsf@yahoo.com> <87a6h5tap6.fsf@gnus.org> <87tufbu7jg.fsf@yahoo.com> <87y24nr6nk.fsf@gnus.org> <87lf0ntz0t.fsf@yahoo.com> <87pmpzr3jz.fsf@gnus.org> <87h7bbtukz.fsf@yahoo.com> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="770"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/29.0.50 (gnu/linux) Cc: eliz@gnu.org, emacs-devel@gnu.org, stefankangas@gmail.com, Richard Stallman To: Po Lu Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Tue Dec 14 11:28:45 2021 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mx537-000AbV-Ao for ged-emacs-devel@m.gmane-mx.org; Tue, 14 Dec 2021 11:28:45 +0100 Original-Received: from localhost ([::1]:47452 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mx535-0004Im-Sy for ged-emacs-devel@m.gmane-mx.org; Tue, 14 Dec 2021 05:28:43 -0500 Original-Received: from eggs.gnu.org ([209.51.188.92]:42060) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mx525-0003Vd-Nm for emacs-devel@gnu.org; Tue, 14 Dec 2021 05:27:41 -0500 Original-Received: from [2a01:4f9:2b:f0f::2] (port=57226 helo=quimby.gnus.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mx523-0002bl-FP; Tue, 14 Dec 2021 05:27:41 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=FJQc+12/Pm4H6zLtmuEEprIMjgyTD1jryJA4ZOu5oH0=; b=GIPtZbcvLICrKXrVKG7S8Z9DZJ eI2HWWJj4NuFinxob7uUECueTl+RdDRvc7fHBI1xRC/+Fv+hHbAsXc8RQ/wGeSNCRCOopi1K+kYJO If5fqHSQKTxChdbYFnGHzuc8KASSa1EioNNY8tSiXplvd562Qb6DdPlnztSOFgXS2c+E=; Original-Received: from [84.212.220.105] (helo=xo) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mx51w-000883-KZ; Tue, 14 Dec 2021 11:27:35 +0100 Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAABGdBTUEAALGPC/xhBQAAACBj SFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAAAG1BMVEX48tr+/e68qJlS eVVDPSuoWkLDnVLRn1v///+6XTF/AAAAAWJLR0QIht6VegAAAAd0SU1FB+UMDgoaFuYccP8AAAGy SURBVDjLzZTBctsgEIatzPQu2hdINwbdTRLfK/ICqhfd5QB3edh9/S6KJMtNPNNj/wMD8+2/u0jA breqrnbVbis1q8yrZVFv5hNU1RqkvlJ9D6i/Mv0DqAU82U/6VUC1f8OTQ4zxhOice5NxBh6yj2nU iNgHNIM+rUD73owGsUMeoUOcgNpj0hgzIGgdxAh6BRgwGegAwL2MutuA6H0jQINzBeu5BiIEikOQ ZPEdB4Bvq0OiOAJEMBf0i2MCemjiKJhyL1FrDQAzAEuOQCRjAaoAMTcjJAbIzIaujtLIGPl8AM2R ieilAFWAhozeHhviRMRs51QDYBcQnxNnTiw6L2Aou0VMLNGSjC8zSDHiIEDy+CZ75nEGrxyx08HT QGNDv6/Avkb5DbnPPRkfbSxgatdaCuhzEjBgaNu1uDgMpsChpxTQHtnO+7CHEJFDwj4R4/lIAsp5 27egO6CRsZPvwhc4L4728IBgWHBDkezhaQHOPcuxca1bVYor9QCf9Dg5rud1e1yv4MP4Bbi9XurO 9bitcXtBtlGPd8CPm642i+8/7/Wu/hvw8ebU1bSj65tT/wGcQLm6HwaWWwAAACV0RVh0ZGF0ZTpj cmVhdGUAMjAyMS0xMi0xNFQxMDoyNjoyMiswMDowMEQ3huUAAAAldEVYdGRhdGU6bW9kaWZ5ADIw MjEtMTItMTRUMTA6MjY6MjIrMDA6MDA1aj5ZAAAAAElFTkSuQmCC X-Now-Playing: Frankie Goes To Hollywood's _Welcome To The Pleasuredome_: "Two Tribes" In-Reply-To: <87h7bbtukz.fsf@yahoo.com> (Po Lu's message of "Tue, 14 Dec 2021 17:16:28 +0800") X-Host-Lookup-Failed: Reverse DNS lookup failed for 2a01:4f9:2b:f0f::2 (failed) Received-SPF: pass client-ip=2a01:4f9:2b:f0f::2; envelope-from=larsi@gnus.org; helo=quimby.gnus.org X-Spam_score_int: -35 X-Spam_score: -3.6 X-Spam_bar: --- X-Spam_report: (-3.6 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RDNS_NONE=0.793, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:281886 Archived-At: Po Lu writes: > The problem is that such a whitelist has to operate on a list of names > by principle, but if the doc string is to be trusted, legitimate plugins > (and proprietary ones) can also be referred to by an absolute file path > to a shared library. > > How did you work around this problem? Thanks. I didn't. As I explained before, there's no technical way to block a user from loading whatever they way, either via LD_PRELOAD or any number of other mechanisms. We can only discourage it, which this allowlist does. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no