On Tue, 26 Aug 2008 14:01:12 +0100 "Jan Minář" <[EMAIL PROTECTED]> wrote:
> This is inherently insecure. I am aware of this; I make it very clear. Drop a .vimrc saying let g:additionalrc_stop = 1 in the innermost-nested place you can that's still safe, and all is OK. Fail to do that, and On Your Head Be It. E.g. $ bzr checkout http://some.dodgy.hacker.com/weird/code $ cat >.vimrc let g:additionalrc_stop = 1 ^D I can now be sure that none of dodgy hacker's .vimrc files will take any effect, because the one I wrote as a sibling of his checked out directory tells it to stop. I realise you can easily forget to do this. I realise you can easily forget to lock your front door at night, and have gun-wielding drunken drug-dealers wander in off the street. As long as you know this and are happy to take that risk, is that good enough? -- Paul "LeoNerd" Evans [EMAIL PROTECTED] ICQ# 4135350 | Registered Linux# 179460 http://www.leonerd.org.uk/
signature.asc
Description: PGP signature
