emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: sudo:: method in tramp possible security issue


From: Stefan Monnier
Subject: Re: sudo:: method in tramp possible security issue
Date: Tue, 20 Nov 2018 16:18:57 -0500
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux)

> Is there a simple way to configure Emacs so that it does not use this sudo
> (or sudoedit) feature of Tramp?

Yes: use the default config and just don't use Tramp's sudo method.

> I long ago put (setq tramp-mode nil) into my ~/.emacs file because of
> security concerns, so I wouldn't need to selectively disable sudo
> myself.

Tramp is not magical: it can do no more nor less than what an attacker
could do.  So disabling it doesn't buy you anything in this respect, AFAICT.


        Stefan



reply via email to

[Prev in Thread] Current Thread [Next in Thread]