GNU bug report logs -
#27986
26.0.50; `rename-file' can rename files without confirmation
Previous Next
Reported by: Philipp <p.stephani2 <at> gmail.com>
Date: Sun, 6 Aug 2017 15:41:02 UTC
Severity: important
Tags: security
Found in version 26.0.50
Done: Paul Eggert <eggert <at> cs.ucla.edu>
Bug is archived. No further changes may be made.
Full log
View this message in rfc822 format
On 09/11/2017 10:09 AM, Eli Zaretskii wrote:
> I think there was a confusion here between interactive and
> non-interactive uses of rename-file. For interactive use, AFAIR we
> agreed that the behavior should stay as before, in particular to be
> consistent with e.g. invocation of 'mv' from the shell prompt.
That wasn't my understanding, and the email record is consistent with my
interpretation. Although we discussed mv, the last comment on that topic
was from John, who wrote about mv that "Making the Emacs version more
restrictive, however, makes sense" (Bug#27986#145). This corresponds to
the patch I installed, whose rename-file is more restrictive than mv
because it balks at renaming a regular file F to G when G is not a
directory name but happens to be an existing directory.
As I wrote, I don't think this will matter much in practice because the
point is moot when file name completion is used. If I'm wrong and it is
a significant problem, I can still implement the suggestion in
Bug#27986#97 to ameliorate it. It may be better, though, to try out what
we have now for a while, to see whether that suggestion would actually help.
This bug report was last modified 7 years and 257 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.