GNU bug report logs - #9920
23.2; Not trusting file .hg/hgrc from untrusted user... for 'vc-hg.el'.

Previous Next

Package: emacs;

Reported by: Oleksandr Gavenko <gavenko <at> bifit.com.ua>

Date: Mon, 31 Oct 2011 16:11:01 UTC

Severity: normal

Found in version 23.2

Fixed in version 23.3

Done: Dan Nicolaescu <dann <at> gnu.org>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 9920 in the body.
You can then email your comments to 9920 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-gnu-emacs <at> gnu.org:
bug#9920; Package emacs. (Mon, 31 Oct 2011 16:11:01 GMT) Full text and rfc822 format available.

Acknowledgement sent to Oleksandr Gavenko <gavenko <at> bifit.com.ua>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs <at> gnu.org. (Mon, 31 Oct 2011 16:11:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Oleksandr Gavenko <gavenko <at> bifit.com.ua>
To: bug-gnu-emacs <at> gnu.org
Subject: 23.2;
	Not trusting file .hg/hgrc from untrusted user... for 'vc-hg.el'.
Date: Mon, 31 Oct 2011 15:33:18 +0200
Under Debian I have:

  $ ls -l .hg/hgrc
-rw-rw-r-- 1 www-data www-data 97  19 18:23 .hg/hgrc

To resolve issue http://mercurial.selenic.com/wiki/Trust I put to '~/.hgrc':

  [trusted]
  users = apache, daemon, www-data
  groups = apache, daemon, www-data

but Emacs ignore that as some 'hg' command invoked with
'HGRCPATH='. So

  $ hg st README.rst
M README.rst
  $  HGRCPATH= hg st README.rst
Not trusting file /usr/srv/hg/test/.hg/hgrc from untrusted user 
www-data, group www-data
Not trusting file .hg/hgrc from untrusted user www-data, group www-data
Not trusting file /usr/srv/hg/test/.hg/hgrc from untrusted user 
www-data, group www-data
Not trusting file /usr/srv/hg/test/.hg/hgrc from untrusted user 
www-data, group www-data
M README.rst

Because of this Emacs VC status line show "Not trusting file..." instead 
of "Hg-201".

And so C-x v v does not work as Emacs does not detect local changes in 
file...

So I can not commit from a file. As workaround I commit from VC-dir.

-- 
Best regards!




Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#9920; Package emacs. (Mon, 31 Oct 2011 20:29:02 GMT) Full text and rfc822 format available.

Message #8 received at 9920 <at> debbugs.gnu.org (full text, mbox):

From: Dan Nicolaescu <dann <at> gnu.org>
To: Oleksandr Gavenko <gavenko <at> bifit.com.ua>
Cc: 9920 <at> debbugs.gnu.org
Subject: Re: bug#9920: 23.2;
	Not trusting file .hg/hgrc from untrusted user... for 'vc-hg.el'.
Date: Mon, 31 Oct 2011 16:26:00 -0400
Oleksandr Gavenko <gavenko <at> bifit.com.ua> writes:

> Under Debian I have:

What version of emacs are you using?
emacs-23.3 and emacs-snapshot do not set HGRCPATH anymore, so you should
not see this issue.




Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#9920; Package emacs. (Tue, 01 Nov 2011 09:32:03 GMT) Full text and rfc822 format available.

Message #11 received at 9920 <at> debbugs.gnu.org (full text, mbox):

From: Oleksandr Gavenko <gavenko <at> bifit.com.ua>
Cc: 9920 <at> debbugs.gnu.org
Subject: Re: bug#9920: 23.2; Not trusting file .hg/hgrc from untrusted user...
	for 'vc-hg.el'.
Date: Tue, 01 Nov 2011 11:29:33 +0200
31.10.2011 22:26, Dan Nicolaescu пишет:
> Oleksandr Gavenko<gavenko <at> bifit.com.ua>  writes:
>
>> Under Debian I have:
>
> What version of emacs are you using?
> emacs-23.3 and emacs-snapshot do not set HGRCPATH anymore, so you should
> not see this issue.
>
23.2 as this in subj.

As you wrote I think updating Emacs to new version resolve my issue...

Currently I can not update Emacs version without additional effort
as Debian does not provide Emacs 23.3 in "stable".

-- 
С уважением, Александр Гавенко.




Reply sent to Dan Nicolaescu <dann <at> gnu.org>:
You have taken responsibility. (Wed, 02 Nov 2011 14:11:01 GMT) Full text and rfc822 format available.

Notification sent to Oleksandr Gavenko <gavenko <at> bifit.com.ua>:
bug acknowledged by developer. (Wed, 02 Nov 2011 14:11:01 GMT) Full text and rfc822 format available.

Message #16 received at 9920-done <at> debbugs.gnu.org (full text, mbox):

From: Dan Nicolaescu <dann <at> gnu.org>
To: Oleksandr Gavenko <gavenko <at> bifit.com.ua>
Cc: 9920-done <at> debbugs.gnu.org
Subject: Re: bug#9920: 23.2;
	Not trusting file .hg/hgrc from untrusted user... for 'vc-hg.el'.
Date: Wed, 02 Nov 2011 10:08:09 -0400
Closing, works in 23.3.




bug Marked as fixed in versions 23.3. Request was from Glenn Morris <rgm <at> gnu.org> to control <at> debbugs.gnu.org. (Wed, 02 Nov 2011 15:30:02 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Thu, 01 Dec 2011 12:24:02 GMT) Full text and rfc822 format available.

This bug report was last modified 13 years and 201 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.