GNU bug report logs - #51327
28.0.60; emacsclient warns about XDG_RUNTIME_DIR when starting daemon on-demand

Previous Next

Package: emacs;

Reported by: Jim Porter <jporterbugs <at> gmail.com>

Date: Fri, 22 Oct 2021 04:59:02 UTC

Severity: normal

Tags: security

Found in version 28.0.60

Full log


Message #45 received at 51327 <at> debbugs.gnu.org (full text, mbox):

From: Eli Zaretskii <eliz <at> gnu.org>
To: Stefan Kangas <stefan <at> marxist.se>
Cc: jporterbugs <at> gmail.com, eggert <at> cs.ucla.edu, 51327 <at> debbugs.gnu.org
Subject: Re: bug#51327: 28.0.60;
 emacsclient warns about XDG_RUNTIME_DIR when starting daemon on-demand
Date: Tue, 07 Dec 2021 16:27:08 +0200
> From: Stefan Kangas <stefan <at> marxist.se>
> Date: Tue, 7 Dec 2021 12:26:23 +0100
> Cc: Jim Porter <jporterbugs <at> gmail.com>, 51327 <at> debbugs.gnu.org
> 
> Paul Eggert <eggert <at> cs.ucla.edu> writes:
> 
> > Thanks, this patch looks good to me. You're right that the current approach is
> > insecure, and your patch should make it somewhat less insecure.
> 
> Agreed.  The only question is if this patch should go to emacs-28 or
> master?  Perhaps Eli or Lars has an opinion about that.

AFAIU, Ulrich wasn't happy with that patch and proposed an
alternative?




This bug report was last modified 2 years and 284 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.