Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Re: [PATCH] basic modelines for contrib/nvi

0 views
Skip to first unread message

espi...@gmail.com

unread,
Jul 25, 2004, 5:04:24 PM7/25/04
to
On Mon, 19 Jul 2004 15:15:04 +0200, Jilles Tjoelker <jil...@stack.nl> wrote:
<snip>
>
> There are some options which can pose a security risk, including but not
> limited to cdpath, tempdir, path and shell. You should make a list of
> "safe" options and only allow those in modelines.

Thanks for the feedback, stay tuned for nvi modelines improvement! As
soon as I have enough time, I'm going to take some forbidden options
(for now, they are cdpath, directory, shell, backup and path. Please
tell me what other options would be unsafe) and quietly strip them
from the modeline.
_______________________________________________
freebsd...@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hacke...@freebsd.org"

0 new messages