Your message dated Tue, 20 May 2014 20:48:35 -0700 (PDT)
with message-id <[email protected]>
and subject line Re: Bug#186774
has caused the Debian Bug report #186774,
regarding GNU Emacs 21: desktop.el security weakness?
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
186774: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=186774
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: emacs21
Version: 21.2-1
Severity: wishlist

I asked about this on the -emacsen list a while ago, but nobody
replied...

This is from the end of desktop-save in desktop.el:

      (if (file-exists-p filename) (delete-file filename))
      (let ((coding-system-for-write 'emacs-mule))
        (write-region (point-min) (point-max) filename nil 'nomessage))))

IOW emacs always recreates the desktop file from scratch.  This seems
to have the unpleasant side-effect that it is made world-readable with
each save (unless blocked by umask, but most people's umask is not
that paranoid).  Does anyone else agree that this might be a problem?

Simply removing the first line should fix it ...

-- 
Ian Zimmerman, Oakland, California, U.S.A. 
if (sizeof(signed) > sizeof(unsigned) + 4) { delete this; }
GPG: 433BA087  9C0F 194F 203A 63F7 B1B8  6E5A 8CA3 27DB 433B A087


--- End Message ---
--- Begin Message ---
I verified that this issue does not occur in the current Emacs, 24.3.
(I did not check precisely when it changed.)

--- End Message ---

Reply via email to