From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Andreas Schwab Newsgroups: gmane.emacs.devel Subject: Re: Fix needed for communication with gpg-agent Date: Sun, 25 Feb 2007 20:50:22 +0100 Message-ID: References: <87irdzs6pp.fsf@stupidchicken.com> <87fy91g1pl.fsf@catnip.gol.com> <87wt2dk2rv.fsf@stupidchicken.com> <873b4yt7xx.fsf@stupidchicken.com> <87ps82ukz8.fsf@wheatstone.g10code.de> <87slcynii0.fsf@stupidchicken.com> <87bqjivxrz.fsf@stupidchicken.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-Trace: sea.gmane.org 1172433065 27513 80.91.229.12 (25 Feb 2007 19:51:05 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Sun, 25 Feb 2007 19:51:05 +0000 (UTC) Cc: rms@gnu.org, Sascha Wilde , ueno@unixuser.org, emacs-devel@gnu.org, wk@gnupg.org, miles@gnu.org To: Chong Yidong Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sun Feb 25 20:50:57 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1HLPOa-0005mR-QX for ged-emacs-devel@m.gmane.org; Sun, 25 Feb 2007 20:50:57 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HLPOa-0001bi-U7 for ged-emacs-devel@m.gmane.org; Sun, 25 Feb 2007 14:50:56 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1HLPOQ-0001bT-Jo for emacs-devel@gnu.org; Sun, 25 Feb 2007 14:50:46 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1HLPOO-0001an-3g for emacs-devel@gnu.org; Sun, 25 Feb 2007 14:50:45 -0500 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HLPON-0001ag-WF for emacs-devel@gnu.org; Sun, 25 Feb 2007 14:50:44 -0500 Original-Received: from ns.suse.de ([195.135.220.2] helo=mx1.suse.de) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA:32) (Exim 4.52) id 1HLPOL-0006vc-EZ; Sun, 25 Feb 2007 14:50:41 -0500 Original-Received: from Relay1.suse.de (mail2.suse.de [195.135.221.8]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.suse.de (Postfix) with ESMTP id 8EBFD124AB; Sun, 25 Feb 2007 20:50:38 +0100 (CET) X-Yow: An INK-LING? Sure -- TAKE one!! Did you BUY any COMMUNIST UNIFORMS?? In-Reply-To: <87bqjivxrz.fsf@stupidchicken.com> (Chong Yidong's message of "Sun, 25 Feb 2007 14:32:16 -0500") User-Agent: Gnus/5.110006 (No Gnus v0.6) Emacs/22.0.91 (gnu/linux) X-detected-kernel: Linux 2.4-2.6 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:66803 Archived-At: Chong Yidong writes: > This is arguably a security hole because it makes it too easy for root > to find people's passwords (granted, root can easily steal passwords > anyway, but it arguably shouldn't be *this* easy.) If you are root you can read every process's memory, no matter where it i= s stored. Andreas. --=20 Andreas Schwab, SuSE Labs, schwab@suse.de SuSE Linux Products GmbH, Maxfeldstra=DFe 5, 90409 N=FCrnberg, Germany PGP key fingerprint =3D 58CA 54C7 6D53 942B 1756 01D3 44D5 214B 8276 4ED= 5 "And now for something completely different."