From mboxrd@z Thu Jan  1 00:00:00 1970
Path: news.gmane.org!.POSTED!not-for-mail
From: Stefan Monnier <monnier@iro.umontreal.ca>
Newsgroups: gmane.emacs.help
Subject: Re: CVE-2017-14482 - Red Hat Customer Portal
Date: Fri, 29 Sep 2017 16:28:58 -0400
Message-ID: <jwvshf55k21.fsf-monnier+gmane.emacs.help@gnu.org>
References: <CAArVCkRYeM5XLWpZ7h=50Tth5k7a898gCcJYFaG7_NULt2vEUQ@mail.gmail.com>
	<87vak8c5mq.fsf@robertthorpeconsulting.com>
NNTP-Posting-Host: blaine.gmane.org
Mime-Version: 1.0
Content-Type: text/plain
X-Trace: blaine.gmane.org 1506716993 27254 195.159.176.226 (29 Sep 2017 20:29:53 GMT)
X-Complaints-To: usenet@blaine.gmane.org
NNTP-Posting-Date: Fri, 29 Sep 2017 20:29:53 +0000 (UTC)
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux)
To: help-gnu-emacs@gnu.org
Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Fri Sep 29 22:29:50 2017
Return-path: <help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org>
Envelope-to: geh-help-gnu-emacs@m.gmane.org
Original-Received: from lists.gnu.org ([208.118.235.17])
	by blaine.gmane.org with esmtp (Exim 4.84_2)
	(envelope-from <help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org>)
	id 1dy1us-0006OX-E6
	for geh-help-gnu-emacs@m.gmane.org; Fri, 29 Sep 2017 22:29:46 +0200
Original-Received: from localhost ([::1]:36996 helo=lists.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org>)
	id 1dy1uz-0002aa-RK
	for geh-help-gnu-emacs@m.gmane.org; Fri, 29 Sep 2017 16:29:53 -0400
Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:47112)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <geh-help-gnu-emacs@m.gmane.org>) id 1dy1uX-0002Zi-9H
	for help-gnu-emacs@gnu.org; Fri, 29 Sep 2017 16:29:26 -0400
Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <geh-help-gnu-emacs@m.gmane.org>) id 1dy1uT-0007yl-9F
	for help-gnu-emacs@gnu.org; Fri, 29 Sep 2017 16:29:25 -0400
Original-Received: from [195.159.176.226] (port=50955 helo=blaine.gmane.org)
	by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
	(Exim 4.71) (envelope-from <geh-help-gnu-emacs@m.gmane.org>)
	id 1dy1uT-0007yN-2C
	for help-gnu-emacs@gnu.org; Fri, 29 Sep 2017 16:29:21 -0400
Original-Received: from list by blaine.gmane.org with local (Exim 4.84_2)
	(envelope-from <geh-help-gnu-emacs@m.gmane.org>) id 1dy1uA-0002u3-Rj
	for help-gnu-emacs@gnu.org; Fri, 29 Sep 2017 22:29:02 +0200
X-Injected-Via-Gmane: http://gmane.org/
Original-Lines: 8
Original-X-Complaints-To: usenet@blaine.gmane.org
Cancel-Lock: sha1:nRCtZSe1cWOrvm5X94wkx0yOxVg=
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
	[fuzzy]
X-Received-From: 195.159.176.226
X-BeenThere: help-gnu-emacs@gnu.org
X-Mailman-Version: 2.1.21
Precedence: list
List-Id: Users list for the GNU Emacs text editor <help-gnu-emacs.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/help-gnu-emacs>,
	<mailto:help-gnu-emacs-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/help-gnu-emacs/>
List-Post: <mailto:help-gnu-emacs@gnu.org>
List-Help: <mailto:help-gnu-emacs-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/help-gnu-emacs>,
	<mailto:help-gnu-emacs-request@gnu.org?subject=subscribe>
Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org
Original-Sender: "help-gnu-emacs"
	<help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org>
Xref: news.gmane.org gmane.emacs.help:114482
Archived-At: <http://permalink.gmane.org/gmane.emacs.help/114482>

> So, a person could declare their main local partition to be trusted.

I don't know about you, but my home directory/partition is full of files
over which I have no real control (typically clones of other people's
Git repositories).  So it sounds risky.


        Stefan