Would it be useful for XEmacs to warn if it finds lisp that is world
or group writeable? It occured to me that a system cracker or
prankster could subvert root's XEmacs, and install a cookie monster
or something worse.
What about a dump-time config option to set the group that should own
the systemwide XEmacs lisp files, and if that group should have write
access or not? I guess this feature might be an optional one too.
Also the user's personal elisp in the home directory ought to be
checked this way as well.
Show replies by date