[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Bug: tangle failure of one block results in failure to set =:tangle-mode
From: |
Tom Gillespie |
Subject: |
Bug: tangle failure of one block results in failure to set =:tangle-mode= of another [9.3 (9.3-elpaplus @ /home/tom/.emacs.d/elpa/org-plus-contrib-20191203/)] |
Date: |
Fri, 6 Dec 2019 22:36:23 -0800 |
Remember to cover the basics, that is, what you expected to happen and
what in fact did happen. You don't know how to make a good report? See
https://orgmode.org/manual/Feedback.html#Feedback
Your bug report will be posted to the Org mailing list.
------------------------------------------------------------------------
* Description
=#+HEADER: :tangle= arguments fail after other blocks tangle
=#+BEGIN_SRC lang :tangle= arguments fail before other blocks tangle
When tangling multiple blocks if a block fails during tangling after
some other block has already been tangled, the block that has already
been tangled will not have its =:tangle-mode= set. This can result in
a =:tangle-mode (identity #o0600)= header argument failing to be
applied after a file has been created resulting in a file that is
readable by anyone instead of secure.
* Affected versions
9.1.9, 9.3
* Observed behavior
An error occurs during tangling multiple blocks with =C-c C-v C-t=.
Files that are expected to have a mode set (e.g. =#o0755=, or =#o0600=)
by a =:tangle-mode= header retain the default mode =#o0644=.
It does not matter whether =:tangle-mode= is set on a =#+HEADER:= line
or on a =#+BEGIN_SRC= line.
* Expected behavior
It is not entirely clear what the best way to fix this is. Anything
that causes a failure
between the time that a file is tangled and tangle mode is set could
cause a similar issue.
One way to ensure that this cannot happen is the following:
1. Before a block is tangled check for the =:tangle-mode= header
2. If the =:tangle-mode= header exists, touch the file to be tangled
DO NOT WRITE THE CONTENTS YET
3. Set the mode specified by the =:tangle-mode= header
4. Now write the contents of the file
This will prevent a file from being written =#o0644= by default and
possibly left exposed.
* Reproduction
This is a contrived example. The secret file has to be tangled before
the other block fails
to tangle. To reproduce the issue I am using a missing folder to cause
an error after
tangling the secret file but before its =:tangle-mode= has been set. NOTE:
_any other failure that can occur after some other block has tangled
can cause the same problem_.
The examples also attached.
#+NAME: org-bug-0-0.org
#+BEGIN_EXAMPLE org
To reproduce =emacs -q --load org -- org-bug-0-0.org= and then =C-c C-v C-t=
#+HEADER: :tangle-mode (identity #o0600)
#+BEGIN_SRC bash :eval never :tangle ./some-secret-file.sh
export ALL_MY_ENVIRONMENT_VARS=secret
#+END_SRC
#+HEADER: :tangle ./this-folder-does-not-exist/some-other-file
#+BEGIN_SRC bash :eval never
echo will fail to tangle after some-secret-file.sh is written
echo BUT before its :tangle-mode is set
#+END_SRC
#+END_EXAMPLE
#+NAME: org-bug-0-1.org
#+BEGIN_EXAMPLE org
To reproduce =emacs -q --load org -- org-bug-0-1.org= and then =C-c C-v C-t=
#+BEGIN_SRC bash :eval never :tangle ./some-secret-file-2.sh
:tangle-mode (identity #o0600)
export ALL_MY_ENVIRONMENT_VARS=secret
#+END_SRC
#+BEGIN_SRC bash :eval never :tangle
./this-folder-does-not-exist/some-other-file
echo will fail to tangle after some-secret-file-2.sh is written
echo BUT before its :tangle-mode is set
#+END_SRC
#+END_EXAMPLE
Emacs : GNU Emacs 26.3 (build 1, x86_64-pc-linux-gnu, X toolkit)
of 2019-09-27
Package: Org mode version 9.3 (9.3-elpaplus @
/home/tom/.emacs.d/elpa/org-plus-contrib-20191203/)
Package: Org mode version 9.1.9 (release_9.1.9-65-g5e4542 @
/usr/share/emacs/26.3/lisp/org/)
org-bug-0-0.org
Description: Lotus Organizer
org-bug-0-1.org
Description: Lotus Organizer
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- Bug: tangle failure of one block results in failure to set =:tangle-mode= of another [9.3 (9.3-elpaplus @ /home/tom/.emacs.d/elpa/org-plus-contrib-20191203/)],
Tom Gillespie <=