|
From: | GNU bug Tracking System |
Subject: | bug#44018: closed (Don't consider play-sound-file to be a 'safe' function) |
Date: | Mon, 26 Oct 2020 11:52:02 +0000 |
Your message dated Mon, 26 Oct 2020 12:51:22 +0100 with message-id <34EB6848-A1C1-421C-8F7C-6181E55D15D5@acm.org> and subject line Re: bug#44018: Don't consider play-sound-file to be a 'safe' function has caused the debbugs.gnu.org bug report #44018, regarding Don't consider play-sound-file to be a 'safe' function to be marked as done. (If you believe you have received this mail in error, please contact help-debbugs@gnu.org.) -- 44018: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=44018 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems
--- Begin Message ---Subject: Don't consider play-sound-file to be a 'safe' function Date: Thu, 15 Oct 2020 18:55:26 +0200 We should remove play-sound-file from the list of 'safe' functions in unsafep.el. The risks outweigh the benefits here; this is just basic security engineering. The attack surface of play-sound-file is considerable.
--- End Message ---
--- Begin Message ---Subject: Re: bug#44018: Don't consider play-sound-file to be a 'safe' function Date: Mon, 26 Oct 2020 12:51:22 +0100 Given Lars's approval and the lack of further objections, I'm removing play-sound-file from the list of safe functions in unsafep.el. The change is easily reverted if there are misgivings.
--- End Message ---
[Prev in Thread] | Current Thread | [Next in Thread] |