Re: LyX--Knitr warnings.

[Richard Kimberly Heck]

On 03/30/2018 06:02 PM, Scott Kostyshak wrote:
> On Fri, Mar 30, 2018 at 09:00:34PM +, John Kane wrote:
>> Ah, not a bug, a feature. I guess I will learn to live with it.
>> Thanks very much. It's good to know I don't have a potentially serious
>> problem in my configuration.
> You do not have to live with it (instructions below), but think hard
> before you remove it. Have you ever downloaded and compiled a .lyx file
> from the internet from a place you are not sure you could trust? It
> would be extremely easy to make a .lyx file that would upload/delete all
> of your files (because in R this is easy to write). And for that to
> happen, all you would have to do is open the LyX file and compile it.

And, just for anyone else reading this thread: This is precisely why
this new warning exists.
Not just for R, but for anything that poses this kind of threat. It's
our attempt to make LyX a
bit more secure.

Riki

Re: LyX--Knitr warnings.

[Scott Kostyshak]

On Fri, Mar 30, 2018 at 11:44:12PM +, John Kane wrote:
> Thanks Scott,
> Nice to know I have the option of getting rid of it. I, probably will leave
> it on once I get over the annoyance of it flashing up on every new file.

Good choice :)
I do agree it's annoying, but I think the annoyance is worth it.

> Have you ever downloaded and compiled a .lyx file
> from the internet from a place you are not sure you could trust?
> 
> I suppose I have but so rarely that I cannot recall don't recall doing so
> in the last three or four years, at least. Unless downloading from here
> counts :)

I would claim that it does count. Anyone can send an arbitrary .lyx file
to the list. And not many people use signatures so it would not be hard
to send an email pretending to be someone else.

Scott


signature.asc
Description: PGP signature

Re: LyX--Knitr warnings.

[John Kane]

Thanks Scott,
Nice to know I have the option of getting rid of it. I, probably will leave
it on once I get over the annoyance of it flashing up on every new file.

Have you ever downloaded and compiled a .lyx file
from the internet from a place you are not sure you could trust?

I suppose I have but so rarely that I cannot recall don't recall doing so
in the last three or four years, at least. Unless downloading from here
counts :)

On 30 March 2018 at 18:02, Scott Kostyshak  wrote:

> On Fri, Mar 30, 2018 at 09:00:34PM +, John Kane wrote:
> > Ah, not a bug, a feature. I guess I will learn to live with it.
> > Thanks very much. It's good to know I don't have a potentially serious
> > problem in my configuration.
>
> You do not have to live with it (instructions below), but think hard
> before you remove it. Have you ever downloaded and compiled a .lyx file
> from the internet from a place you are not sure you could trust? It
> would be extremely easy to make a .lyx file that would upload/delete all
> of your files (because in R this is easy to write). And for that to
> happen, all you would have to do is open the LyX file and compile it.
>
> That said, if clicking on "Always run for this document" is too much of
> a pain, you can go to Tools > Preferences > Converters and uncheck the
> option "Use needauth option".
>
> Scott
>



-- 
John Kane
Kingston ON Canada

Re: LyX--Knitr warnings.

[Scott Kostyshak]

On Fri, Mar 30, 2018 at 09:00:34PM +, John Kane wrote:
> Ah, not a bug, a feature. I guess I will learn to live with it.
> Thanks very much. It's good to know I don't have a potentially serious
> problem in my configuration.

You do not have to live with it (instructions below), but think hard
before you remove it. Have you ever downloaded and compiled a .lyx file
from the internet from a place you are not sure you could trust? It
would be extremely easy to make a .lyx file that would upload/delete all
of your files (because in R this is easy to write). And for that to
happen, all you would have to do is open the LyX file and compile it.

That said, if clicking on "Always run for this document" is too much of
a pain, you can go to Tools > Preferences > Converters and uncheck the
option "Use needauth option".

Scott


signature.asc
Description: PGP signature

Re: LyX--Knitr warnings.

[John Kane]

Ah, not a bug, a feature. I guess I will learn to live with it.
Thanks very much. It's good to know I don't have a potentially serious
problem in my configuration.

On 30 March 2018 at 16:58, Kornel Benko  wrote:

> Am Freitag, 30. März 2018 16:49:49 CEST schrieb John Kane
> :
> > I forgot to try it! Yes it is working.
> > I just wonder why the blasted warning is appearing in the first place. It
> > seems unlikely that I have a virus but possible. I did a major update on
> my
> > R packages and upgraded from knitr 1.18 to knutr 1.20 today so if it is a
> > virus it is migrating.
>
> This warning is new. It is displayed on all scripts which are processed be
> an
> external program.
>
> > Now if I can remember how to update ClamAV signatures, I'll run a scan.
> >
> > Forgot my info
> > OS Ubuntu 16.04
> > Lyx 2.3.0
> > knitr 1.20
> > R version 3.4.4 (2018-03-15)
>
> OK.
> This affects all platforms and probably also all future lyx versions.
>
>  Kornel
>
>


-- 
John Kane
Kingston ON Canada

Re: LyX--Knitr warnings.

[Kornel Benko]

Am Freitag, 30. März 2018 16:49:49 CEST schrieb John Kane 
:
> I forgot to try it! Yes it is working.
> I just wonder why the blasted warning is appearing in the first place. It
> seems unlikely that I have a virus but possible. I did a major update on my
> R packages and upgraded from knitr 1.18 to knutr 1.20 today so if it is a
> virus it is migrating.

This warning is new. It is displayed on all scripts which are processed be an 
external program.

> Now if I can remember how to update ClamAV signatures, I'll run a scan.
> 
> Forgot my info
> OS Ubuntu 16.04
> Lyx 2.3.0
> knitr 1.20
> R version 3.4.4 (2018-03-15)

OK.
This affects all platforms and probably also all future lyx versions.

 Kornel



signature.asc
Description: This is a digitally signed message part.

Re: LyX--Knitr warnings.

[John Kane]

ClamAV reports the R folder is clean, for what's that's worth.

On 30 March 2018 at 16:49, John Kane  wrote:

> I forgot to try it! Yes it is working.
> I just wonder why the blasted warning is appearing in the first place. It
> seems unlikely that I have a virus but possible. I did a major update on my
> R packages and upgraded from knitr 1.18 to knutr 1.20 today so if it is a
> virus it is migrating.
>
> Now if I can remember how to update ClamAV signatures, I'll run a scan.
>
> Forgot my info
> OS Ubuntu 16.04
> Lyx 2.3.0
> knitr 1.20
> R version 3.4.4 (2018-03-15)
>
> On 30 March 2018 at 16:41, Kornel Benko  wrote:
>
>> Am Freitag, 30. März 2018 16:36:23 CEST schrieb John Kane
>> :
>> >  I have the Rnw(knitr) module permanently loaded in my default template.
>> > Ever time I compile I get a warning message (see attached screenshot).
>> The
>> > document compiles with no problem but this is getting on my nerves. If I
>> > remove the module, the warning does not appear.
>> > This seems to have appeared after an upgrade to LyX 2.3.0 on 2018-02-24.
>> > Can anyone hazard a guess what is going on? This does not look like a
>> bug,
>> > much more likely a problem in my configuration but I don't have a clue
>> on
>> > how to diagnose the problem.
>> > MWE attached.
>> >
>> > Any suggestions gratefully received.
>>
>> Is 'Always run for this document' not working?
>> This is a warning that you _may_ have a virus in this external script.
>> If you are sure that it is OK, you can check this button.
>>
>> Kornel
>>
>
>
>
> --
> John Kane
> Kingston ON Canada
>



-- 
John Kane
Kingston ON Canada

Re: LyX--Knitr warnings.

[John Kane]

I forgot to try it! Yes it is working.
I just wonder why the blasted warning is appearing in the first place. It
seems unlikely that I have a virus but possible. I did a major update on my
R packages and upgraded from knitr 1.18 to knutr 1.20 today so if it is a
virus it is migrating.

Now if I can remember how to update ClamAV signatures, I'll run a scan.

Forgot my info
OS Ubuntu 16.04
Lyx 2.3.0
knitr 1.20
R version 3.4.4 (2018-03-15)

On 30 March 2018 at 16:41, Kornel Benko  wrote:

> Am Freitag, 30. März 2018 16:36:23 CEST schrieb John Kane
> :
> >  I have the Rnw(knitr) module permanently loaded in my default template.
> > Ever time I compile I get a warning message (see attached screenshot).
> The
> > document compiles with no problem but this is getting on my nerves. If I
> > remove the module, the warning does not appear.
> > This seems to have appeared after an upgrade to LyX 2.3.0 on 2018-02-24.
> > Can anyone hazard a guess what is going on? This does not look like a
> bug,
> > much more likely a problem in my configuration but I don't have a clue on
> > how to diagnose the problem.
> > MWE attached.
> >
> > Any suggestions gratefully received.
>
> Is 'Always run for this document' not working?
> This is a warning that you _may_ have a virus in this external script.
> If you are sure that it is OK, you can check this button.
>
> Kornel
>



-- 
John Kane
Kingston ON Canada

Re: LyX--Knitr warnings.

[Kornel Benko]

Am Freitag, 30. März 2018 16:36:23 CEST schrieb John Kane 
:
>  I have the Rnw(knitr) module permanently loaded in my default template.
> Ever time I compile I get a warning message (see attached screenshot). The
> document compiles with no problem but this is getting on my nerves. If I
> remove the module, the warning does not appear.
> This seems to have appeared after an upgrade to LyX 2.3.0 on 2018-02-24.
> Can anyone hazard a guess what is going on? This does not look like a bug,
> much more likely a problem in my configuration but I don't have a clue on
> how to diagnose the problem.
> MWE attached.
> 
> Any suggestions gratefully received.

Is 'Always run for this document' not working?
This is a warning that you _may_ have a virus in this external script.
If you are sure that it is OK, you can check this button.

Kornel


signature.asc
Description: This is a digitally signed message part.

LyX--Knitr warnings.

[John Kane]

 I have the Rnw(knitr) module permanently loaded in my default template.
Ever time I compile I get a warning message (see attached screenshot). The
document compiles with no problem but this is getting on my nerves. If I
remove the module, the warning does not appear.
This seems to have appeared after an upgrade to LyX 2.3.0 on 2018-02-24.
Can anyone hazard a guess what is going on? This does not look like a bug,
much more likely a problem in my configuration but I don't have a clue on
how to diagnose the problem.
MWE attached.

Any suggestions gratefully received.
-- 
John Kane
Kingston ON Canada


MWE1.lyx
Description: application/lyx