Re: [RFC] MIME attachments for comint

[Richard Stallman <rms@gnu.org>]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

Thanks.  I did not know about the write18 feature.

  > which means that shell commands are allowed "partially", that is, that the 
  > only allowed commands are those that are listed in shell_escape_commands:

  > shell_escape_commands = bibtex,bibtex8,extractbb,gregorio,kpsewhich,makeindex,repstopdf,r-mpost,texosquery-jre8

  > echo ls > bibtex
  > chmod +x bibtex
  > export PATH=.:$PATH
  > echo '\write18{bibtex}\bye' > test.tex
  > pdftex test.tex

  > In practice, this is not really a problem, because it requires to either 
  > change one of the programs listed in shell_escape_commands, or to change 
  > the PATH environment variable.  But it's fragile nonetheless.

I agree.

If someone is working on a feature in Emacs that will run TeX on files
you have not studied, I think we should make very sure there is no way for
that feature to use other than those default settings, unless the user
very directly insists.

-- 
Dr Richard Stallman (https://stallman.org)
Chief GNUisance of the GNU Project (https://gnu.org)
Founder, Free Software Foundation (https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)