From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 08 08:33:44 2022 Received: (at submit) by debbugs.gnu.org; 8 Feb 2022 13:33:44 +0000 Received: from localhost ([127.0.0.1]:45861 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHQcp-0003SI-LQ for submit@debbugs.gnu.org; Tue, 08 Feb 2022 08:33:44 -0500 Received: from lists.gnu.org ([209.51.188.17]:53210) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHNvs-0002bh-Hz for submit@debbugs.gnu.org; Tue, 08 Feb 2022 05:41:14 -0500 Received: from eggs.gnu.org ([209.51.188.92]:46184) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHNvs-0008Cc-0G for bug-gnu-emacs@gnu.org; Tue, 08 Feb 2022 05:41:12 -0500 Received: from mail-am6eur05olkn2016.outbound.protection.outlook.com ([40.92.91.16]:54369 helo=EUR05-AM6-obe.outbound.protection.outlook.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHNva-00005y-HH for bug-gnu-emacs@gnu.org; Tue, 08 Feb 2022 05:40:58 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=e4M1XRvAXi4nva9dW6k37eOrSGT0dV/qltqEtEOWPIlsc4pZJ7c6AAEqRYbtZuqZ4qaHrshoCOSePGD1MqmxKGxtBHgzugKS0IMYp4T7nHRvqkhXldoSXKhtSBuMjhnYmWN7L9+EHuoxwSRv47mchFuGZGSbkZn4OE17tLVcxzRhOmB8WfAcA8/xk52dMmaig3qPxYZJzsX4FcWXykQweCkVZvOE05KmdxsDPDFgd6I9mJO+CRPKefN0yIcHP7tTdj1SnATc1sDcPcwNzCb2qxc5vQ3fl2mDTobGURbtAdXwOrn89MIa9G1vtR3hoeO/A/2LnHDAJuhq8RusU0ythw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=62kL/FQNJIA4FvF67WLLFYhWcM0u15CqMW4neDt8v5g=; b=hioXvKHO0LLLPBhCju+adjXt0ZbHpXAO7FhwAMikiiXwwP+EcnHHJqxV/IAb0jUrmBpcCinm1CkFTDkhwA+PxnrusPSLHZ1JCYFrQD41WemrVdyuBT9DzsG0zimwcvjRn9DPSd1ebUNHhHqGbs6Vvmd7tH6zN4IvyjRRBUAIgRXZdqyn0w2/KwgDbsCXhEU0y+VT3nQ8shU5XYyDWXHobVwSO+OfwLFzMjf3FlE5LniYu2b91wEOqqp0Tom+CSfX9suBCMLNlFF8ltD3se64wM1sSd7cywRlVYRmi0qv35JU3exVEKCefprDsR+jOKCXx9WCIz9En6k1yboIriVqfw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=62kL/FQNJIA4FvF67WLLFYhWcM0u15CqMW4neDt8v5g=; b=eke9A+NSEW04lslbLT3VGV3T55q6JLq74WfUYvo1lRL3TWQJwlBRv7Lmj03YMqsa1ypbMmcIhiFpJSbX2OCUwya4dmHa9sDL++kX8vExh+21CkMEJK6gOrdzvOwtbRvQXutZEUvMje30vAnUAaCBy6oQf53fy6GlV7TTRlVVvafrNjUMKOrEgnX9Ho2O6xTTS6KXBghz8Oefi2JlkeFfwO95bqcq90IkXJQfTqqmXx2SEZgcumbYK/gJMEWGmM/NuRHfX+zdDjV4ZtFZg9tucu9/9So9DT6SB6rBZ0u5KfJM8MHaTzdV6FBiePEh8gmoc7JsqcvNfjkkLfggykT5Ng== Received: from PAXPR06MB7760.eurprd06.prod.outlook.com (2603:10a6:102:155::8) by AM9PR06MB7954.eurprd06.prod.outlook.com (2603:10a6:20b:38b::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4951.11; Tue, 8 Feb 2022 10:20:06 +0000 Received: from PAXPR06MB7760.eurprd06.prod.outlook.com ([fe80::50de:9162:7856:2782]) by PAXPR06MB7760.eurprd06.prod.outlook.com ([fe80::50de:9162:7856:2782%5]) with mapi id 15.20.4951.019; Tue, 8 Feb 2022 10:20:06 +0000 User-agent: mu4e 1.6.10; emacs 27.2 From: Ignacio Casso To: bug-gnu-emacs@gnu.org Subject: 27.2; "eval: (X-mode)" is always safe as file local variable Date: Tue, 08 Feb 2022 10:29:16 +0100 Message-ID: Content-Type: text/plain X-TMN: [y71dT+UI4cmYffYYp90R+CsQfHH+PgK0] X-ClientProxiedBy: MR2P264CA0003.FRAP264.PROD.OUTLOOK.COM (2603:10a6:500:1::15) To PAXPR06MB7760.eurprd06.prod.outlook.com (2603:10a6:102:155::8) X-Microsoft-Original-Message-ID: <87leyl3bjj.fsf@hotmail.com> MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: d5b08279-c00e-41ea-ef7f-08d9eaec9391 X-MS-TrafficTypeDiagnostic: AM9PR06MB7954:EE_ X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?It9Q4yeXmHSUXuMcf70XLlc8Zl060RlDeVUNCEQqi2tsebJB6838oHSnusse?= =?us-ascii?Q?Sq3GT6H/wVe5wKWUhTksrtCIplh2DCx9KwG/qsd9A85YsbN7luVlUJPamH7l?= =?us-ascii?Q?rTOiGi0Fy4yac86D04n02a68L23EnWhXi4IrSYtstiT1NGcB7nBnTJkJpZYZ?= =?us-ascii?Q?AJzcrgc9aRf2lNI2ag3nY4kY9PrQBq6fLluFw6hUjgaaRRafiOEE6i5ZtkY+?= =?us-ascii?Q?6N9s1N6vsOnP0/KbEX3w9LA5/+h/Nve19NQnPKhdNRGM+I+imuOOArZvJEiv?= =?us-ascii?Q?5JIQcF7CvqgmvnVchrEn2tsOVjVuZUGLOYUuA88Lw+5B+tHRkIule2BFD6KS?= =?us-ascii?Q?fxym1W5DOaywiaqB8IvI53+Eaxpty/MyehbcP4e+ZoByUti0v8rQxdPuQmhb?= =?us-ascii?Q?JWUFtZn+QQ/RlKd+N65yAC/wGb+NdBLKl962nuJCoVeIGM7CuwtCNEq5SYIh?= =?us-ascii?Q?W4rFXNySpqOzOK4E/ZlKu6Oi/H22xUxZVOyAC0eBUQAF5xX4h6Ec99MSnCrJ?= =?us-ascii?Q?riVyY1ivM7bKxbhhi1GVpYzuGfOYMXQQYLAou456k0f8wVD15iUBj5IEqYYB?= =?us-ascii?Q?rfJR+RYYrkoIVkBT+sTEOptoHubZcLJdPwGracP1GiJamB0lrsbAsY42M72h?= =?us-ascii?Q?OMiMDYvKAxrJUkYCuTKbl67BvXtZ02VW5cub5N57VLUrBqs7xJmSYYaPm9ue?= =?us-ascii?Q?7hf08vp9vQSPsFwXAkFjSrjF2WU1wlMaDYbvK/T3olArzt7pAS6KBBrMM0Fm?= =?us-ascii?Q?Tw+GQTwRxq5PYz1IBJyidTSX07i0Sja96mgL5GvuU8lzOw8Zbmgw5Y84m/vp?= =?us-ascii?Q?2+Dnkk45BFdBXvktAM2zDj+9+edOm9IGq9/zmQtY1zRzDWL/Hzfc5rF5y8tl?= =?us-ascii?Q?sE0Y8K45aMSFjH8wXPG1p7gurEE57B2pFGxVCHRI/Qe10hzLu0Zw6CuGClZO?= =?us-ascii?Q?B0ZOKifo1QtCpnodZH/dxQ=3D=3D?= X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-6e454.templateTenant X-MS-Exchange-CrossTenant-Network-Message-Id: d5b08279-c00e-41ea-ef7f-08d9eaec9391 X-MS-Exchange-CrossTenant-AuthSource: PAXPR06MB7760.eurprd06.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Feb 2022 10:20:06.2537 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR06MB7954 Received-SPF: pass client-ip=40.92.91.16; envelope-from=ignaciocasso@hotmail.com; helo=EUR05-AM6-obe.outbound.protection.outlook.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.2 (/) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Tue, 08 Feb 2022 08:33:40 -0500 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hello, I've noticed something that I believe it might be a bug. With Emacs 27.2 and the default configuration (starting with emacs -Q), I get the following behavior: If I visit a file ending with the three lines below, I get the usual prompt asking whether I want to apply the local variables since they might not be safe. So far so good. # Local Variables: # eval: (message "file was visited") # End: If I visit a file with the following local variables instead, I don't get that prompt and the form is evaluated immediately, so I get line numbers in the buffer. This happens for any other mode. # Local Variables: # eval: (display-line-numbers-mode) # End: I'm not sure if that is still good, but the real problem comes now, when I define a function with a name ending in "-mode", like the following: (defun not-really-a-mode () (message "This could be doing something nasty")) If I visit a file with the following local variables, I don't get the prompt either and the form is evaluated immediately. # Local Variables: # eval: (not-really-a-mode) # End: (Of course, activating an actual mode could be doing something equally nasty, but somehow I find this worse) I've investigated a little and found the function hack-one-local-variable-eval-safep in files.el, which is responsible for this. It has a comment that says "Allow (minor)-modes calls with no arguments.", and just checks whether the function ends in "-mode". I'm not sure if it's a bug or a feature, and it's not important at all to me, since it's actually convenient. I'm just reporting it since I noticed it and I'm trying to get in the habit of reporting (possible) bugs when I find them. Best regards, Ignacio In GNU Emacs 27.2 (build 1, x86_64-pc-linux-gnu, GTK+ Version 3.24.20) of 2022-01-16 built on ignacio-IdeaPad-3-15ADA05 Windowing system distributor 'The X.Org Foundation', version 11.0.12013000 System Description: Ubuntu 20.04.3 LTS From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 08 10:56:35 2022 Received: (at control) by debbugs.gnu.org; 8 Feb 2022 15:56:35 +0000 Received: from localhost ([127.0.0.1]:48385 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHSr4-0007mb-T0 for submit@debbugs.gnu.org; Tue, 08 Feb 2022 10:56:35 -0500 Received: from eggs.gnu.org ([209.51.188.92]:46294) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHSr4-0007mN-8F for control@debbugs.gnu.org; Tue, 08 Feb 2022 10:56:34 -0500 Received: from [2001:470:142:3::e] (port=33276 helo=fencepost.gnu.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHSqy-0005hj-Ko for control@debbugs.gnu.org; Tue, 08 Feb 2022 10:56:28 -0500 Received: from rgm by fencepost.gnu.org with local (Exim 4.90_1) (envelope-from ) id 1nHSqy-0007BD-CZ for control@debbugs.gnu.org; Tue, 08 Feb 2022 10:56:28 -0500 Subject: control message for bug 53876 To: X-Mailer: mail (GNU Mailutils 3.4) Message-Id: From: Glenn Morris Date: Tue, 08 Feb 2022 10:56:28 -0500 X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) tag 53876 security From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 08 11:42:12 2022 Received: (at 53876) by debbugs.gnu.org; 8 Feb 2022 16:42:12 +0000 Received: from localhost ([127.0.0.1]:48435 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHTZE-0002ot-IZ for submit@debbugs.gnu.org; Tue, 08 Feb 2022 11:42:12 -0500 Received: from eggs.gnu.org ([209.51.188.92]:32932) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHTZC-0002oe-7I for 53876@debbugs.gnu.org; Tue, 08 Feb 2022 11:42:11 -0500 Received: from [2001:470:142:3::e] (port=34348 helo=fencepost.gnu.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHTZ3-0005JU-Jw; Tue, 08 Feb 2022 11:42:04 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=NEkvQ76RVxH4ML/TMH3K4OzsU+CsT0TDDzNCOPJBnpo=; b=QtEtT1jM1xTIZ0u4PH6X XJNhs8fN8E1NUKrdLxueWjrSGezgbRzDRctEuZ5JvW75/hQvIyj8x/QJh8EC1ZuWFGktxmiyVgCMV OppFI+l/dzOt2WAFLt8Uo3bBTJEhVsgnbBYlWZyCL6t6QBrwD2Qg319AbtAr7juBcvYQHwsJN2pS0 tY+R9zHYkA22DQDKcnHk/gBxz87TQQeMwajnyX/37WFNEZt+10ifd/Qj2cT9vTbiiJoRa5j4yAWtL k16ZqK4hFKpsLqRgCBKqnkkMYaprfq3bGszylJx1pGYG1yYbsvtfrhJrxiCMd2Uax9f/+3oyv75km flXY/XumlWNrDg==; Received: from rgm by fencepost.gnu.org with local (Exim 4.90_1) (envelope-from ) id 1nHTZ3-0004Kr-5s; Tue, 08 Feb 2022 11:42:01 -0500 From: Glenn Morris To: Ignacio Casso Subject: Re: bug#53876: 27.2; "eval: (X-mode)" is always safe as file local variable References: X-Spook: Secret Service Hollyhock Lightening Cartel de Golfo SRI X-Ran: >EG^VT&9@P_*b (Ignacio Casso's message of "Tue, 08 Feb 2022 10:29:16 +0100") Message-ID: <0nsfst5mzq.fsf@fencepost.gnu.org> User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 53876 Cc: 53876@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Thanks for the report. Same issue with "-*- mode: not-really-a; -*-". It's all intentional behaviour, but how sensible it is is a valid question. From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 08 20:08:22 2022 Received: (at 53876) by debbugs.gnu.org; 9 Feb 2022 01:08:22 +0000 Received: from localhost ([127.0.0.1]:49177 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHbT4-00020g-2s for submit@debbugs.gnu.org; Tue, 08 Feb 2022 20:08:22 -0500 Received: from eggs.gnu.org ([209.51.188.92]:40564) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHbT2-00020U-4v for 53876@debbugs.gnu.org; Tue, 08 Feb 2022 20:08:20 -0500 Received: from [2001:470:142:3::e] (port=44440 helo=fencepost.gnu.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHbSw-0001QU-Tx; Tue, 08 Feb 2022 20:08:14 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=S8aHKoQT1yxHpoSAKK+KE8jW0fuJr7ttKfRfULkUb5s=; b=WFNKLQ5ucHVQPVZGNIej ITHcBdhe+twzPtQsGOZ0C/S9yCs/IB/yT8Oh2zC55cT66AOUIvybSKVzIWpAuW7sofC4869hvtyuO qRSM58jCbLrZsM9Eh5180CK5TCUwKScBNfmaJtqOjaofpuKKATSKzYtfEIcQ/MP2gA/mb/ldtePYG DYJOVAzZLQ84TTj6SYlXb6EOTeTUskc2hS8onuV9CU/+k6ico4uzCO1+eN6eYZMF3Xz+hHto+UXmL uDEFvYg5kucpu3/XLd5JSqMNe66hdilAyBWNfqWo3+qKOY9TAmD2OdkSp6fN9FGTY9nJLXXDjGGVp NOCCvBlIIrwTdw==; Received: from rgm by fencepost.gnu.org with local (Exim 4.90_1) (envelope-from ) id 1nHbSw-0003Bg-Ly; Tue, 08 Feb 2022 20:08:14 -0500 From: Glenn Morris To: Ignacio Casso Subject: Re: bug#53876: 27.2; "eval: (X-mode)" is always safe as file local variable References: <0nsfst5mzq.fsf@fencepost.gnu.org> X-Spook: Deaths Phreaking Emergency management NCCS NATO Attorney X-Ran: $}h.iDF"V30Mkm_/iXXCO}+af#?fGDKXk9-@0(k]W3dYmN!,4-|/RGm]UV0S{]n/hc1GpN X-Hue: magenta X-Attribution: GM Date: Tue, 08 Feb 2022 20:08:14 -0500 In-Reply-To: <0nsfst5mzq.fsf@fencepost.gnu.org> (Glenn Morris's message of "Tue, 08 Feb 2022 11:42:01 -0500") Message-ID: User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 53876 Cc: 53876@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) I suppose the assumption is that code already available in the user's environment is not intrinsically malicious (ie does not contain deliberately harmful mode definitions). Rather the file-local variables safety mechanisms are intended to protect against malicious code actually embedded in the file being visited; something like eval: (shell-command ...). It underlines again the need to be careful about what elisp libraries one installs (although the simple act of installing a package can already directly execute arbitrary code anyway). From debbugs-submit-bounces@debbugs.gnu.org Wed Feb 09 03:23:22 2022 Received: (at 53876) by debbugs.gnu.org; 9 Feb 2022 08:23:22 +0000 Received: from localhost ([127.0.0.1]:49649 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHiG2-0005kS-2g for submit@debbugs.gnu.org; Wed, 09 Feb 2022 03:23:22 -0500 Received: from quimby.gnus.org ([95.216.78.240]:32962) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHiG0-0005kB-Ns for 53876@debbugs.gnu.org; Wed, 09 Feb 2022 03:23:21 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=VjKb3N3W3ZIyIao39R54IsDh6pkDPt4vllty5mDi3zc=; b=fFH4AWx6JkPSiwLUUmAj4lJp2d CHqJRen3Df7C+6Q4IveZCYSMUz5s6QNdh6rQle5Rn2HRruXvmcaj2BYXVtaVDq1Pd5FPQ6/aZcD1n fT/Nme+8/DfI5c0VdDjCA1zWH0HeP1ccHPsWYFdjbUAHqBO6zxHI3m1PQf5jSIIdHtv4=; Received: from [84.212.220.105] (helo=giant) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nHiFr-000848-Sy; Wed, 09 Feb 2022 09:23:14 +0100 From: Lars Ingebrigtsen To: Glenn Morris Subject: Re: bug#53876: 27.2; "eval: (X-mode)" is always safe as file local variable References: <0nsfst5mzq.fsf@fencepost.gnu.org> X-Now-Playing: Simon & Garfunkel's _Live From New York City, 1967_: "The 59th Street Bridge Song (Feelin' Groovy)" Date: Wed, 09 Feb 2022 09:23:08 +0100 In-Reply-To: <0nsfst5mzq.fsf@fencepost.gnu.org> (Glenn Morris's message of "Tue, 08 Feb 2022 11:42:01 -0500") Message-ID: <8735ksphxv.fsf@gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/29.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Glenn Morris writes: > Thanks for the report. > > Same issue with "-*- mode: not-really-a; -*-". > > It's all intentional behaviour, but how sensible it is is a valid question. I don't think this is something that we can change at this point, though. If you've installed a package that defines a mode, then the assumption is that it's safe. Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 53876 Cc: 53876@debbugs.gnu.org, Ignacio Casso X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Glenn Morris writes: > Thanks for the report. > > Same issue with "-*- mode: not-really-a; -*-". > > It's all intentional behaviour, but how sensible it is is a valid question. I don't think this is something that we can change at this point, though. If you've installed a package that defines a mode, then the assumption is that it's safe. So I don't think there's anything to fix here, and I'm therefore closing this bug report. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Wed Feb 09 03:23:26 2022 Received: (at control) by debbugs.gnu.org; 9 Feb 2022 08:23:26 +0000 Received: from localhost ([127.0.0.1]:49652 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHiG6-0005kj-A2 for submit@debbugs.gnu.org; Wed, 09 Feb 2022 03:23:26 -0500 Received: from quimby.gnus.org ([95.216.78.240]:32978) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHiG5-0005kJ-DJ for control@debbugs.gnu.org; Wed, 09 Feb 2022 03:23:25 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Subject:From:To:Message-Id:Date:Sender:Reply-To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=7nhyNHwDMxKW5z8Jkbj2pW2XGhVJ10csaoLHm4Iwfhw=; b=Jv2+leaTAMcov4StEvLQba3sZy 02X9BqZbA9YORQ+IbTzUmez/XHDmImKjrDUqB7/KKXw6WybrafsdHXlqxvO8aTq2ZFyyyUuL/XHNw sY10z4gbm8O0X1IUoA+jbIuW1VZFexC9IWS+OcIb0ABvFMf9jQ6sKtblSZWzM5ytApyE=; Received: from [84.212.220.105] (helo=giant) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nHiFx-00084L-Lr for control@debbugs.gnu.org; Wed, 09 Feb 2022 09:23:19 +0100 Date: Wed, 09 Feb 2022 09:23:17 +0100 Message-Id: <871r0cphxm.fsf@gnus.org> To: control@debbugs.gnu.org From: Lars Ingebrigtsen Subject: control message for bug #53876 X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: tags 53876 notabug close 53876 quit Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) tags 53876 notabug close 53876 quit From unknown Wed Jun 18 23:18:32 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Wed, 09 Mar 2022 12:24:10 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator