all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* emacsclient socket ownership
@ 2018-11-01 16:43 Glenn Morris
  2018-11-02 15:38 ` Stefan Monnier
  0 siblings, 1 reply; 30+ messages in thread
From: Glenn Morris @ 2018-11-01 16:43 UTC (permalink / raw)
  To: emacs-devel


Hi,

emacsclient defaults to predictable socket file names in /tmp:

/tmp/emacsUID/server

It checks if the socket is owned by the same user (function socket_status).
If the user is root, however, this check is ignored (master emacsclient
line 1370). Is this not a security issue? Any user can create a socket
/tmp/emacs0/server, and root emacsclient will use it.



^ permalink raw reply	[flat|nested] 30+ messages in thread

end of thread, other threads:[~2018-12-06 21:01 UTC | newest]

Thread overview: 30+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-11-01 16:43 emacsclient socket ownership Glenn Morris
2018-11-02 15:38 ` Stefan Monnier
2018-11-02 16:53   ` Yuri Khan
2018-11-02 18:49     ` Stefan Monnier
2018-11-02 20:08       ` Paul Eggert
2018-11-02 20:30         ` Stefan Monnier
2018-11-02 21:06           ` Paul Eggert
2018-11-05  1:13   ` Glenn Morris
2018-11-05  4:46     ` Stefan Monnier
2018-11-05  7:26       ` Paul Eggert
2018-11-06 17:19         ` Daniel Pittman
2018-11-06 17:54           ` Stefan Monnier
2018-11-06 18:17           ` Paul Eggert
2018-11-13 18:21             ` Glenn Morris
2018-11-13 19:25               ` Eli Zaretskii
2018-11-05  5:12     ` Paul Eggert
2018-12-05 18:53       ` Michael Heerdegen
2018-12-05 19:38         ` Glenn Morris
2018-12-05 19:46           ` Eli Zaretskii
2018-12-05 20:02             ` Glenn Morris
2018-12-05 20:19               ` Eli Zaretskii
2018-12-06  0:36                 ` Paul Eggert
2018-12-06  6:37                   ` Eli Zaretskii
2018-12-06 19:08                     ` Paul Eggert
2018-12-06 19:18                       ` Eli Zaretskii
2018-12-06 20:26                       ` Glenn Morris
2018-12-06 21:01                         ` Paul Eggert
2018-12-05 20:33           ` Glenn Morris
2018-12-05 20:58           ` Michael Heerdegen
2018-12-06  0:49         ` Paul Eggert

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.