[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: master 739593d 3/5: Make gnus-copy-file act like copy-file etc.

From: Paul Eggert
Subject: Re: master 739593d 3/5: Make gnus-copy-file act like copy-file etc.
Date: Tue, 12 Sep 2017 12:22:24 -0700
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0

On 09/11/2017 07:33 PM, Katsumi Yamaoka wrote:
But it might have to be documented in also the Gnus manual, as
`gnus-summary-save-article' that uses the function doesn't
specify a destination and a user has to enter the directory name.

The special behavior with gnus-summary-save-article and directories (or directory names) was not documented. Although I'm not a Gnus expert I took a stab at documenting the current behavior by installing the attached patch. If we revert the Gnus change (or make further changes) then this part of the manual will need to be revisited.

IMHO, reverting the change would be better.

Does file name completion (TAB) cause '/' to be appended to the destination directory when you're using Gnus to save files? That should reduce the problem, though I admit it does not eliminate it.

The change was prompted by security concerns where attackers can hijack your data by planting symlinks at the wrong time in shared areas under /tmp and suchlike. We could complicate Emacs somewhat to make it more backwards-compatible in common cases such as yours; Eli is suggesting something along these lines. The tradeoff between convenience and security and maintainability is not obvious, though, and I worry that the suggestion as-is will reintroduce security problems for interactive users. Perhaps we can think of something better.

Attachment: 0001-Tweak-Gnus-doc-re-gnus-copy-file.patch
Description: Text Data

reply via email to

[Prev in Thread] Current Thread [Next in Thread]