From unknown Fri Aug 15 18:46:39 2025 X-Loop: help-debbugs@gnu.org Subject: bug#53876: 27.2; "eval: (X-mode)" is always safe as file local variable Resent-From: Ignacio Casso Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 08 Feb 2022 13:34:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 53876 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 53876@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.164432722413296 (code B ref -1); Tue, 08 Feb 2022 13:34:02 +0000 Received: (at submit) by debbugs.gnu.org; 8 Feb 2022 13:33:44 +0000 Received: from localhost ([127.0.0.1]:45861 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHQcp-0003SI-LQ for submit@debbugs.gnu.org; Tue, 08 Feb 2022 08:33:44 -0500 Received: from lists.gnu.org ([209.51.188.17]:53210) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHNvs-0002bh-Hz for submit@debbugs.gnu.org; Tue, 08 Feb 2022 05:41:14 -0500 Received: from eggs.gnu.org ([209.51.188.92]:46184) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHNvs-0008Cc-0G for bug-gnu-emacs@gnu.org; Tue, 08 Feb 2022 05:41:12 -0500 Received: from mail-am6eur05olkn2016.outbound.protection.outlook.com ([40.92.91.16]:54369 helo=EUR05-AM6-obe.outbound.protection.outlook.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHNva-00005y-HH for bug-gnu-emacs@gnu.org; Tue, 08 Feb 2022 05:40:58 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=e4M1XRvAXi4nva9dW6k37eOrSGT0dV/qltqEtEOWPIlsc4pZJ7c6AAEqRYbtZuqZ4qaHrshoCOSePGD1MqmxKGxtBHgzugKS0IMYp4T7nHRvqkhXldoSXKhtSBuMjhnYmWN7L9+EHuoxwSRv47mchFuGZGSbkZn4OE17tLVcxzRhOmB8WfAcA8/xk52dMmaig3qPxYZJzsX4FcWXykQweCkVZvOE05KmdxsDPDFgd6I9mJO+CRPKefN0yIcHP7tTdj1SnATc1sDcPcwNzCb2qxc5vQ3fl2mDTobGURbtAdXwOrn89MIa9G1vtR3hoeO/A/2LnHDAJuhq8RusU0ythw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=62kL/FQNJIA4FvF67WLLFYhWcM0u15CqMW4neDt8v5g=; b=hioXvKHO0LLLPBhCju+adjXt0ZbHpXAO7FhwAMikiiXwwP+EcnHHJqxV/IAb0jUrmBpcCinm1CkFTDkhwA+PxnrusPSLHZ1JCYFrQD41WemrVdyuBT9DzsG0zimwcvjRn9DPSd1ebUNHhHqGbs6Vvmd7tH6zN4IvyjRRBUAIgRXZdqyn0w2/KwgDbsCXhEU0y+VT3nQ8shU5XYyDWXHobVwSO+OfwLFzMjf3FlE5LniYu2b91wEOqqp0Tom+CSfX9suBCMLNlFF8ltD3se64wM1sSd7cywRlVYRmi0qv35JU3exVEKCefprDsR+jOKCXx9WCIz9En6k1yboIriVqfw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=62kL/FQNJIA4FvF67WLLFYhWcM0u15CqMW4neDt8v5g=; b=eke9A+NSEW04lslbLT3VGV3T55q6JLq74WfUYvo1lRL3TWQJwlBRv7Lmj03YMqsa1ypbMmcIhiFpJSbX2OCUwya4dmHa9sDL++kX8vExh+21CkMEJK6gOrdzvOwtbRvQXutZEUvMje30vAnUAaCBy6oQf53fy6GlV7TTRlVVvafrNjUMKOrEgnX9Ho2O6xTTS6KXBghz8Oefi2JlkeFfwO95bqcq90IkXJQfTqqmXx2SEZgcumbYK/gJMEWGmM/NuRHfX+zdDjV4ZtFZg9tucu9/9So9DT6SB6rBZ0u5KfJM8MHaTzdV6FBiePEh8gmoc7JsqcvNfjkkLfggykT5Ng== Received: from PAXPR06MB7760.eurprd06.prod.outlook.com (2603:10a6:102:155::8) by AM9PR06MB7954.eurprd06.prod.outlook.com (2603:10a6:20b:38b::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4951.11; Tue, 8 Feb 2022 10:20:06 +0000 Received: from PAXPR06MB7760.eurprd06.prod.outlook.com ([fe80::50de:9162:7856:2782]) by PAXPR06MB7760.eurprd06.prod.outlook.com ([fe80::50de:9162:7856:2782%5]) with mapi id 15.20.4951.019; Tue, 8 Feb 2022 10:20:06 +0000 User-agent: mu4e 1.6.10; emacs 27.2 From: Ignacio Casso Date: Tue, 08 Feb 2022 10:29:16 +0100 Message-ID: Content-Type: text/plain X-TMN: [y71dT+UI4cmYffYYp90R+CsQfHH+PgK0] X-ClientProxiedBy: MR2P264CA0003.FRAP264.PROD.OUTLOOK.COM (2603:10a6:500:1::15) To PAXPR06MB7760.eurprd06.prod.outlook.com (2603:10a6:102:155::8) X-Microsoft-Original-Message-ID: <87leyl3bjj.fsf@hotmail.com> MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: d5b08279-c00e-41ea-ef7f-08d9eaec9391 X-MS-TrafficTypeDiagnostic: AM9PR06MB7954:EE_ X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: ntSu3e/YlYPDIKLy5QWNA9xH+eVkpvYeZncm3IaLGTRB1MBRu79kVhxFKYglJD1r3R/dAirboN7hB+A1XnI6j2mwHmdV+BDM7jnxrZM8GFee2S+K25g/O5REYj4JyO+awyQVDnf4ld1qk+r5vny+rrShPz8BHSJ1VoOI0AYREs3aKs6qllvV9ZFQYgady/m995pSVN1stliZwxwZlP4LeUBotKtl2HYt77WX6G7CLEVD7J0U205tGjNDiqM27R11o9hJwRH2LGdO4nuX8jhT9iv9TdpjRG8I0CbEpi6v/VQqQh0aaFLjXxGLKVK9vvpH2XcHO0bHX4tXlAclu3upuA2dJbalOXhD0dTj3YbhHcbNVH0b1zHXbqm4Xs0lDOkHhQJPo7Up5OO0V2FSV7GWX7pmLVl5PClNxsWZegAZRdnotoHrzZpz1OpP6RhpZ91qJrWG4JNFgFXiPZKEdCzHLvSxpa40m+1TpUtOOlhn0yjtHuIMQBMww7Rd4sf0TPdHGuK/rU/cdF9tGmvNHivKQHiHybqV3RmReVtPw96kv5SDfGJiMOsCTcPr1UZs6eexv6+2Tm/2gTKel5uWZYRTOw== X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-6e454.templateTenant X-MS-Exchange-CrossTenant-Network-Message-Id: d5b08279-c00e-41ea-ef7f-08d9eaec9391 X-MS-Exchange-CrossTenant-AuthSource: PAXPR06MB7760.eurprd06.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Feb 2022 10:20:06.2537 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR06MB7954 Received-SPF: pass client-ip=40.92.91.16; envelope-from=ignaciocasso@hotmail.com; helo=EUR05-AM6-obe.outbound.protection.outlook.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.2 (/) X-Mailman-Approved-At: Tue, 08 Feb 2022 08:33:40 -0500 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hello, I've noticed something that I believe it might be a bug. With Emacs 27.2 and the default configuration (starting with emacs -Q), I get the following behavior: If I visit a file ending with the three lines below, I get the usual prompt asking whether I want to apply the local variables since they might not be safe. So far so good. # Local Variables: # eval: (message "file was visited") # End: If I visit a file with the following local variables instead, I don't get that prompt and the form is evaluated immediately, so I get line numbers in the buffer. This happens for any other mode. # Local Variables: # eval: (display-line-numbers-mode) # End: I'm not sure if that is still good, but the real problem comes now, when I define a function with a name ending in "-mode", like the following: (defun not-really-a-mode () (message "This could be doing something nasty")) If I visit a file with the following local variables, I don't get the prompt either and the form is evaluated immediately. # Local Variables: # eval: (not-really-a-mode) # End: (Of course, activating an actual mode could be doing something equally nasty, but somehow I find this worse) I've investigated a little and found the function hack-one-local-variable-eval-safep in files.el, which is responsible for this. It has a comment that says "Allow (minor)-modes calls with no arguments.", and just checks whether the function ends in "-mode". I'm not sure if it's a bug or a feature, and it's not important at all to me, since it's actually convenient. I'm just reporting it since I noticed it and I'm trying to get in the habit of reporting (possible) bugs when I find them. Best regards, Ignacio In GNU Emacs 27.2 (build 1, x86_64-pc-linux-gnu, GTK+ Version 3.24.20) of 2022-01-16 built on ignacio-IdeaPad-3-15ADA05 Windowing system distributor 'The X.Org Foundation', version 11.0.12013000 System Description: Ubuntu 20.04.3 LTS From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 08 10:56:35 2022 Received: (at control) by debbugs.gnu.org; 8 Feb 2022 15:56:35 +0000 Received: from localhost ([127.0.0.1]:48385 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHSr4-0007mb-T0 for submit@debbugs.gnu.org; Tue, 08 Feb 2022 10:56:35 -0500 Received: from eggs.gnu.org ([209.51.188.92]:46294) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHSr4-0007mN-8F for control@debbugs.gnu.org; Tue, 08 Feb 2022 10:56:34 -0500 Received: from [2001:470:142:3::e] (port=33276 helo=fencepost.gnu.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHSqy-0005hj-Ko for control@debbugs.gnu.org; Tue, 08 Feb 2022 10:56:28 -0500 Received: from rgm by fencepost.gnu.org with local (Exim 4.90_1) (envelope-from ) id 1nHSqy-0007BD-CZ for control@debbugs.gnu.org; Tue, 08 Feb 2022 10:56:28 -0500 Subject: control message for bug 53876 To: X-Mailer: mail (GNU Mailutils 3.4) Message-Id: From: Glenn Morris Date: Tue, 08 Feb 2022 10:56:28 -0500 X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) tag 53876 security From unknown Fri Aug 15 18:46:39 2025 X-Loop: help-debbugs@gnu.org Subject: bug#53876: 27.2; "eval: (X-mode)" is always safe as file local variable Resent-From: Glenn Morris Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 08 Feb 2022 16:43:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 53876 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security To: Ignacio Casso Cc: 53876@debbugs.gnu.org Received: via spool by 53876-submit@debbugs.gnu.org id=B53876.164433853210847 (code B ref 53876); Tue, 08 Feb 2022 16:43:02 +0000 Received: (at 53876) by debbugs.gnu.org; 8 Feb 2022 16:42:12 +0000 Received: from localhost ([127.0.0.1]:48435 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHTZE-0002ot-IZ for submit@debbugs.gnu.org; Tue, 08 Feb 2022 11:42:12 -0500 Received: from eggs.gnu.org ([209.51.188.92]:32932) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHTZC-0002oe-7I for 53876@debbugs.gnu.org; Tue, 08 Feb 2022 11:42:11 -0500 Received: from [2001:470:142:3::e] (port=34348 helo=fencepost.gnu.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHTZ3-0005JU-Jw; Tue, 08 Feb 2022 11:42:04 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=NEkvQ76RVxH4ML/TMH3K4OzsU+CsT0TDDzNCOPJBnpo=; b=QtEtT1jM1xTIZ0u4PH6X XJNhs8fN8E1NUKrdLxueWjrSGezgbRzDRctEuZ5JvW75/hQvIyj8x/QJh8EC1ZuWFGktxmiyVgCMV OppFI+l/dzOt2WAFLt8Uo3bBTJEhVsgnbBYlWZyCL6t6QBrwD2Qg319AbtAr7juBcvYQHwsJN2pS0 tY+R9zHYkA22DQDKcnHk/gBxz87TQQeMwajnyX/37WFNEZt+10ifd/Qj2cT9vTbiiJoRa5j4yAWtL k16ZqK4hFKpsLqRgCBKqnkkMYaprfq3bGszylJx1pGYG1yYbsvtfrhJrxiCMd2Uax9f/+3oyv75km flXY/XumlWNrDg==; Received: from rgm by fencepost.gnu.org with local (Exim 4.90_1) (envelope-from ) id 1nHTZ3-0004Kr-5s; Tue, 08 Feb 2022 11:42:01 -0500 From: Glenn Morris References: X-Spook: Secret Service Hollyhock Lightening Cartel de Golfo SRI X-Ran: >EG^VT&9@P_*b (Ignacio Casso's message of "Tue, 08 Feb 2022 10:29:16 +0100") Message-ID: <0nsfst5mzq.fsf@fencepost.gnu.org> User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Thanks for the report. Same issue with "-*- mode: not-really-a; -*-". It's all intentional behaviour, but how sensible it is is a valid question. From unknown Fri Aug 15 18:46:39 2025 X-Loop: help-debbugs@gnu.org Subject: bug#53876: 27.2; "eval: (X-mode)" is always safe as file local variable Resent-From: Glenn Morris Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 09 Feb 2022 01:09:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 53876 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security To: Ignacio Casso Cc: 53876@debbugs.gnu.org Received: via spool by 53876-submit@debbugs.gnu.org id=B53876.16443689027735 (code B ref 53876); Wed, 09 Feb 2022 01:09:01 +0000 Received: (at 53876) by debbugs.gnu.org; 9 Feb 2022 01:08:22 +0000 Received: from localhost ([127.0.0.1]:49177 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHbT4-00020g-2s for submit@debbugs.gnu.org; Tue, 08 Feb 2022 20:08:22 -0500 Received: from eggs.gnu.org ([209.51.188.92]:40564) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHbT2-00020U-4v for 53876@debbugs.gnu.org; Tue, 08 Feb 2022 20:08:20 -0500 Received: from [2001:470:142:3::e] (port=44440 helo=fencepost.gnu.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHbSw-0001QU-Tx; Tue, 08 Feb 2022 20:08:14 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=S8aHKoQT1yxHpoSAKK+KE8jW0fuJr7ttKfRfULkUb5s=; b=WFNKLQ5ucHVQPVZGNIej ITHcBdhe+twzPtQsGOZ0C/S9yCs/IB/yT8Oh2zC55cT66AOUIvybSKVzIWpAuW7sofC4869hvtyuO qRSM58jCbLrZsM9Eh5180CK5TCUwKScBNfmaJtqOjaofpuKKATSKzYtfEIcQ/MP2gA/mb/ldtePYG DYJOVAzZLQ84TTj6SYlXb6EOTeTUskc2hS8onuV9CU/+k6ico4uzCO1+eN6eYZMF3Xz+hHto+UXmL uDEFvYg5kucpu3/XLd5JSqMNe66hdilAyBWNfqWo3+qKOY9TAmD2OdkSp6fN9FGTY9nJLXXDjGGVp NOCCvBlIIrwTdw==; Received: from rgm by fencepost.gnu.org with local (Exim 4.90_1) (envelope-from ) id 1nHbSw-0003Bg-Ly; Tue, 08 Feb 2022 20:08:14 -0500 From: Glenn Morris References: <0nsfst5mzq.fsf@fencepost.gnu.org> X-Spook: Deaths Phreaking Emergency management NCCS NATO Attorney X-Ran: $}h.iDF"V30Mkm_/iXXCO}+af#?fGDKXk9-@0(k]W3dYmN!,4-|/RGm]UV0S{]n/hc1GpN X-Hue: magenta X-Attribution: GM Date: Tue, 08 Feb 2022 20:08:14 -0500 In-Reply-To: <0nsfst5mzq.fsf@fencepost.gnu.org> (Glenn Morris's message of "Tue, 08 Feb 2022 11:42:01 -0500") Message-ID: User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) I suppose the assumption is that code already available in the user's environment is not intrinsically malicious (ie does not contain deliberately harmful mode definitions). Rather the file-local variables safety mechanisms are intended to protect against malicious code actually embedded in the file being visited; something like eval: (shell-command ...). It underlines again the need to be careful about what elisp libraries one installs (although the simple act of installing a package can already directly execute arbitrary code anyway). From unknown Fri Aug 15 18:46:39 2025 X-Loop: help-debbugs@gnu.org Subject: bug#53876: 27.2; "eval: (X-mode)" is always safe as file local variable Resent-From: Lars Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 09 Feb 2022 08:24:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 53876 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security To: Glenn Morris Cc: 53876@debbugs.gnu.org, Ignacio Casso Received: via spool by 53876-submit@debbugs.gnu.org id=B53876.164439500222105 (code B ref 53876); Wed, 09 Feb 2022 08:24:01 +0000 Received: (at 53876) by debbugs.gnu.org; 9 Feb 2022 08:23:22 +0000 Received: from localhost ([127.0.0.1]:49649 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHiG2-0005kS-2g for submit@debbugs.gnu.org; Wed, 09 Feb 2022 03:23:22 -0500 Received: from quimby.gnus.org ([95.216.78.240]:32962) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHiG0-0005kB-Ns for 53876@debbugs.gnu.org; Wed, 09 Feb 2022 03:23:21 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=VjKb3N3W3ZIyIao39R54IsDh6pkDPt4vllty5mDi3zc=; b=fFH4AWx6JkPSiwLUUmAj4lJp2d CHqJRen3Df7C+6Q4IveZCYSMUz5s6QNdh6rQle5Rn2HRruXvmcaj2BYXVtaVDq1Pd5FPQ6/aZcD1n fT/Nme+8/DfI5c0VdDjCA1zWH0HeP1ccHPsWYFdjbUAHqBO6zxHI3m1PQf5jSIIdHtv4=; Received: from [84.212.220.105] (helo=giant) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nHiFr-000848-Sy; Wed, 09 Feb 2022 09:23:14 +0100 From: Lars Ingebrigtsen References: <0nsfst5mzq.fsf@fencepost.gnu.org> X-Now-Playing: Simon & Garfunkel's _Live From New York City, 1967_: "The 59th Street Bridge Song (Feelin' Groovy)" Date: Wed, 09 Feb 2022 09:23:08 +0100 In-Reply-To: <0nsfst5mzq.fsf@fencepost.gnu.org> (Glenn Morris's message of "Tue, 08 Feb 2022 11:42:01 -0500") Message-ID: <8735ksphxv.fsf@gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/29.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Glenn Morris writes: > Thanks for the report. > > Same issue with "-*- mode: not-really-a; -*-". > > It's all intentional behaviour, but how sensible it is is a valid question. I don't think this is something that we can change at this point, though. If you've installed a package that defines a mode, then the assumption is that it's safe. Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Glenn Morris writes: > Thanks for the report. > > Same issue with "-*- mode: not-really-a; -*-". > > It's all intentional behaviour, but how sensible it is is a valid question. I don't think this is something that we can change at this point, though. If you've installed a package that defines a mode, then the assumption is that it's safe. So I don't think there's anything to fix here, and I'm therefore closing this bug report. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Wed Feb 09 03:23:26 2022 Received: (at control) by debbugs.gnu.org; 9 Feb 2022 08:23:26 +0000 Received: from localhost ([127.0.0.1]:49652 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHiG6-0005kj-A2 for submit@debbugs.gnu.org; Wed, 09 Feb 2022 03:23:26 -0500 Received: from quimby.gnus.org ([95.216.78.240]:32978) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHiG5-0005kJ-DJ for control@debbugs.gnu.org; Wed, 09 Feb 2022 03:23:25 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Subject:From:To:Message-Id:Date:Sender:Reply-To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=7nhyNHwDMxKW5z8Jkbj2pW2XGhVJ10csaoLHm4Iwfhw=; b=Jv2+leaTAMcov4StEvLQba3sZy 02X9BqZbA9YORQ+IbTzUmez/XHDmImKjrDUqB7/KKXw6WybrafsdHXlqxvO8aTq2ZFyyyUuL/XHNw sY10z4gbm8O0X1IUoA+jbIuW1VZFexC9IWS+OcIb0ABvFMf9jQ6sKtblSZWzM5ytApyE=; Received: from [84.212.220.105] (helo=giant) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nHiFx-00084L-Lr for control@debbugs.gnu.org; Wed, 09 Feb 2022 09:23:19 +0100 Date: Wed, 09 Feb 2022 09:23:17 +0100 Message-Id: <871r0cphxm.fsf@gnus.org> To: control@debbugs.gnu.org From: Lars Ingebrigtsen Subject: control message for bug #53876 X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: tags 53876 notabug close 53876 quit Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) tags 53876 notabug close 53876 quit