From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: "Chris Moore" Newsgroups: gmane.emacs.devel,gmane.emacs.pretest.bugs Subject: Re: creating backups in temporary directories Date: Sat, 8 Sep 2007 16:38:54 +0200 Message-ID: References: <85sl5q5vy6.fsf@lola.goethe.zz> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0402885737==" X-Trace: sea.gmane.org 1189262354 3417 80.91.229.12 (8 Sep 2007 14:39:14 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Sat, 8 Sep 2007 14:39:14 +0000 (UTC) Cc: emacs-pretest-bug@gnu.org To: "Stefan Monnier" Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Sep 08 16:39:15 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1IU1Sm-0008SU-3R for ged-emacs-devel@m.gmane.org; Sat, 08 Sep 2007 16:39:08 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1IU1Sj-0008Nq-Ut for ged-emacs-devel@m.gmane.org; Sat, 08 Sep 2007 10:39:05 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1IU1Se-0008J7-RF for emacs-devel@gnu.org; Sat, 08 Sep 2007 10:39:00 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1IU1Se-0008GS-5e for emacs-devel@gnu.org; Sat, 08 Sep 2007 10:39:00 -0400 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1IU1Sd-0008G5-MF for emacs-devel@gnu.org; Sat, 08 Sep 2007 10:38:59 -0400 Original-Received: from fencepost.gnu.org ([140.186.70.10]) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1IU1Sd-00023f-99 for emacs-devel@gnu.org; Sat, 08 Sep 2007 10:38:59 -0400 Original-Received: from monty-python.gnu.org ([199.232.76.173]) by fencepost.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1IU1SI-0005iv-QA for emacs-pretest-bug@gnu.org; Sat, 08 Sep 2007 10:38:38 -0400 Original-Received: from Debian-exim by monty-python.gnu.org with spam-scanned (Exim 4.60) (envelope-from ) id 1IU1Sa-00022f-HV for emacs-pretest-bug@gnu.org; Sat, 08 Sep 2007 10:38:58 -0400 Original-Received: from rv-out-0910.google.com ([209.85.198.187]) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1IU1SZ-000228-GJ for emacs-pretest-bug@gnu.org; Sat, 08 Sep 2007 10:38:55 -0400 Original-Received: by rv-out-0910.google.com with SMTP id c27so608071rvf for ; Sat, 08 Sep 2007 07:38:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; bh=db8zR9CGwoLXnzoptKR8HjkyyFjYnT3an2LPSlhiDl8=; b=nig7upPXrmVbzj8yA+lokfPxK1/o5UpoFiBHm9EM2HrsAp++ZjG8h8C1EjTiuJoBNn42HsEkL8QunMV1Vn4u3AppVr8QEx1d+u9ptig8gz8PWyhdqHyY4yV50ujRroXCUy+AdN+8+r9qD96W8txPpfIIZwaVoO+if0GdvvQKycI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=V9qpYcLXGNFWgj3guT//gmWrIMmfT0QVq70rovWW7SnhhuV0aswoKp2IXLr35IbAyXoI3lOJipm0Zmg/u3tFh1sk4krVBgZe2l5kBUcVwp9HTz80pJvh0zH4kAFgBd70T5sNg40duPMxZysZQxjUBHy+cmR0o0MLp8U2txME2Do= Original-Received: by 10.142.156.13 with SMTP id d13mr141295wfe.1189262334371; Sat, 08 Sep 2007 07:38:54 -0700 (PDT) Original-Received: by 10.143.4.2 with HTTP; Sat, 8 Sep 2007 07:38:54 -0700 (PDT) In-Reply-To: X-Detected-Kernel: Linux 2.6 (newer, 2) X-Detected-Kernel: Linux 2.6, seldom 2.4 (older, 4) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:78265 gmane.emacs.pretest.bugs:19779 Archived-At: --===============0402885737== Content-Type: multipart/alternative; boundary="----=_Part_5216_1223378.1189262334375" ------=_Part_5216_1223378.1189262334375 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline On 9/7/07, Stefan Monnier wrote: > > Worse yet: creating backup files in /tmp would be a security hole: > some other user seeing you're currently editing /tmp/foo could create > a symlink /tmp/foo~ to some interesting place and then when you save your > file the backup could be placed at that interesting place chosen by > the attacker. If that is the case, then that is an argument for not backing backups in any world (or group?) writeable place. It's not specific to /tmp. I often work in /tmp/ on files that I know I won't want to keep. I still find backup files useful, even for these temporary files. Yes, I can use C-x C-w instead, but that's something I have to remember to do each time, *before* I start editing, otherwise it's too late. I find it a lot more convenient to have Emacs automatically make backup files, and think it would be good to have a user-configurable option to do so. Not that it matters to me personally, I can put some magic Emacs Lisp in my .emacs to get the effect I want. Chris. ------=_Part_5216_1223378.1189262334375 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline
On 9/7/07, Stefan Monnier <monnier@iro.umontreal.ca> wrote:
Worse yet: creating backup files in /tmp would be a security hole:
some other user seeing you're currently editing /tmp/foo could create
a symlink /tmp/foo~ to some interesting place and then when you save your
file the backup could be placed at that interesting place chosen by
the attacker.
 
If that is the case, then that is an argument for not backing backups in any world (or group?) writeable place.  It's not specific to /tmp.
 
I often work in /tmp/ on files that I know I won't want to keep.  I still find backup files useful, even for these temporary files.  Yes, I can use C-x C-w instead, but that's something I have to remember to do each time, *before* I start editing, otherwise it's too late.  I find it a lot more convenient to have Emacs automatically make backup files, and think it would be good to have a user-configurable option to do so.  Not that it matters to me personally, I can put some magic Emacs Lisp in my .emacs to get the effect I want.
 
Chris.

 
------=_Part_5216_1223378.1189262334375-- --===============0402885737== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Emacs-devel mailing list Emacs-devel@gnu.org http://lists.gnu.org/mailman/listinfo/emacs-devel --===============0402885737==--