From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Stefan Monnier via "Bug reports for GNU Emacs, the Swiss army knife of text editors" Newsgroups: gmane.emacs.bugs Subject: bug#75017: 31.0.50; Untrusted user lisp files Date: Tue, 24 Dec 2024 00:48:25 -0500 Message-ID: References: <87bjx43gp7.fsf@pub.pink> <86frmg6xzf.fsf@gnu.org> <87frmf9r3z.fsf@pub.pink> <86v7va4kj6.fsf@gnu.org> Reply-To: Stefan Monnier Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="29814"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Cc: john muhl , 75017@debbugs.gnu.org To: Eli Zaretskii Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Tue Dec 24 06:49:26 2024 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1tPxnJ-0007cp-7S for geb-bug-gnu-emacs@m.gmane-mx.org; Tue, 24 Dec 2024 06:49:25 +0100 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tPxmy-0005ma-TU; Tue, 24 Dec 2024 00:49:05 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tPxmx-0005mS-D9 for bug-gnu-emacs@gnu.org; Tue, 24 Dec 2024 00:49:03 -0500 Original-Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tPxmw-0006T1-EV for bug-gnu-emacs@gnu.org; Tue, 24 Dec 2024 00:49:03 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:References:In-Reply-To:From:To:Subject; bh=cqUAszaiLGA7ixIAWCJsoEB/BRdgd6+DujkHX5PBxAw=; b=DYPPvXSPElblJtxm3jK5XoiVUkiSb2lR10IyfQtazZ5XbE/XAsqwwe3XqfNtD5tlHKNJsaUriOf/o0GhBcc5jFsIgcRFFMhCyQ++1qxkC0V2IFUvnHkhWz1qQXd9T8A/26X1I347Qwh1T+RlmVViGJFsl+x0xLneOt1DVXGBdfK+WVx1lS+SXmAJQlquUAFBQE1c4i2bLgFoCnfKuG8Losk3b4wJNazem3dAj4I4SWlHl68gSva9hrRFbLzqMlASNoX7zJa3HIysRELZiBm5P69Mfd1IjjreaY2LxjobeOwYX6oTk2F8T28IEajr3TNG3XuuMljycM7dP/imbxuQvg==; Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1tPxmw-0002Wa-8O for bug-gnu-emacs@gnu.org; Tue, 24 Dec 2024 00:49:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Stefan Monnier Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 24 Dec 2024 05:49:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 75017 X-GNU-PR-Package: emacs Original-Received: via spool by 75017-submit@debbugs.gnu.org id=B75017.17350193189669 (code B ref 75017); Tue, 24 Dec 2024 05:49:02 +0000 Original-Received: (at 75017) by debbugs.gnu.org; 24 Dec 2024 05:48:38 +0000 Original-Received: from localhost ([127.0.0.1]:59046 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tPxmY-0002Vt-1l for submit@debbugs.gnu.org; Tue, 24 Dec 2024 00:48:38 -0500 Original-Received: from mailscanner.iro.umontreal.ca ([132.204.25.50]:62223) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tPxmU-0002VY-6e for 75017@debbugs.gnu.org; Tue, 24 Dec 2024 00:48:37 -0500 Original-Received: from pmg2.iro.umontreal.ca (localhost.localdomain [127.0.0.1]) by pmg2.iro.umontreal.ca (Proxmox) with ESMTP id 0F261800C4; Tue, 24 Dec 2024 00:48:28 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=iro.umontreal.ca; s=mail; t=1735019307; bh=DSujsBxP9xaXA4ylJ8W4hyg4C5ZGrIC2bTE1xfssvz4=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=Y6vq+VMKpruvxt3+FuAe56aVHb8ycxdPoqStrxO2ZZvYc3GmiFhY4E+260lnSvhaE 2jTnKXTqhHOaT9V+Vq0sf9B/5l7YrN9WcrdWFTWNkH0TpI91M7QdLCfAlm8lKa5MQ1 2NiKpFhSO9faMnZkLNqlSZh170dfy9RX+wWelo21wwHXeOuWXp5ifvEL2K7T4jZSB1 Xs5oregThTOW4sgKoCohpyAUSfcHL+t61R+ybcC+VnxKW+WULVkOgN093dojtNTKzc L19y6W6bLUDPQubYFo4bhZGOloUYDXv7PPnJ7G9m1t5IU9D63PCzk0HVuqvXkK3fmv vtif6OATRwRVQ== Original-Received: from mail01.iro.umontreal.ca (unknown [172.31.2.1]) by pmg2.iro.umontreal.ca (Proxmox) with ESMTP id F1FF2804E6; Tue, 24 Dec 2024 00:48:26 -0500 (EST) Original-Received: from pastel (104-195-225-43.cpe.teksavvy.com [104.195.225.43]) by mail01.iro.umontreal.ca (Postfix) with ESMTPSA id BF25D120099; Tue, 24 Dec 2024 00:48:26 -0500 (EST) In-Reply-To: <86v7va4kj6.fsf@gnu.org> (Eli Zaretskii's message of "Mon, 23 Dec 2024 15:05:17 +0200") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:297684 Archived-At: > Maybe we should trust the early-init-file as well, but then where does > this end? The init files can load gobs of other files. And there's > also custom-file (when it isn't nil), desktop-dirname and > desktop-base-file-name, etc. etc. > Stefan, WDYT about this? For Emacs-30, I see no need to make changes to what we have in this regard for the simple reason that `elisp-flymake-byte-compile` usually doesn't give great feedback in init files or in most of those other funny loaded files like desktop's (both false positives and false negatives). So there's no hurry in deciding whether to include `early-init-file`, or `custom-file`, or `desktop-dirname`, or ... More useful might be to auto-trust the packages's ELisp files found in `load-path` (because these are files for which that backend should usually give good quality feedback). But that's a bigger change and it's not completely clear which files we should trust there, so I don't think we're ready to add that in `emacs-30`. Stefan