GNU logs - #25611, boring messages

Message sent to bug-gnu-emacs@HIDDEN:

Subject: bug#25611: 26.0.50; dired-do-compress unpacks .tgz files
Resent-From: Mike Kupfer <mkupfer@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnu-emacs@HIDDEN
Resent-Date: Fri, 03 Feb 2017 03:51:02 +0000
Resent-Message-ID: <handler.25611.B.148609384015314 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 25611 <at> debbugs.gnu.org
From: Mike Kupfer <mkupfer@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <3060.1486093822.1@alto>
Date: Thu, 02 Feb 2017 19:50:22 -0800
Message-ID: <3061.1486093822@alto>
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Suppose I have a .tar file, I move point to that file in a dired buffer,
and I press "Z".  My file gets converted to a .tgz file.  Okay so far.

If I then press "Z" again, I expect to get the original .tar file back.
Instead, the contents of the .tar file are extracted, and the .tgz file
is left where it was.

First problem: no .tar file.

Second problem: this violates the principle of Least Surprise.  The
prompt just talked about (de)compressing the file, it didn't say
anything about unpacking it.  (Not to mention this is a departure from
earlier behavior of "Z", and it's different behavior than what you'd get
with a plain old text file.)

Corollary to second problem: this can overwrite the user's existing
files, causing the user to lose data.

I can see the utility of the new behavior, but I think it should either
be non-default behavior or bound to a different character in dired.  (I
suppose you could just fix the prompt, but you'd lose the invertibility
of the old "Z" behavior, which seems like a step backward.)

In GNU Emacs 26.0.50.6 (x86_64-unknown-linux-gnu, X toolkit, Xaw scroll bars)
 of 2017-02-02 built on alto
Repository revision: 7cb7a582f44db94292709d35f4f5474f891f03b0
Windowing system distributor 'The X.Org Foundation', version 11.0.11604000
System Description:	Debian GNU/Linux 8.7 (jessie)

Recent messages:
(Shell command succeeded with no output)
Deleting...done
Move: 1 of 1
Move: 1 file
Directory has changed on disk; type g to update Dired
Quit
Type C-x 1 to delete the help window.
tar: This does not look like a tar archive
tar: office-mail-20161212.tar: Not found in archive
tar: Exiting with failure status due to previous errors

Configured using:
 'configure --prefix=/usr/new'

Configured features:
XPM JPEG TIFF GIF PNG SOUND NOTIFY GNUTLS LIBXML2 FREETYPE XFT ZLIB
TOOLKIT_SCROLL_BARS LUCID X11

Important settings:
  value of $LC_TIME: C
  value of $LANG: en_US.UTF-8
  locale-coding-system: utf-8-unix

Major mode: Dired by name

Minor modes in effect:
  shell-dirtrack-mode: t
  delete-selection-mode: t
  global-eldoc-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  buffer-read-only: t
  transient-mark-mode: t

Load-path shadows:
None found.

Features:
(shadow eieio-opt speedbar sb-image ezimage dframe help-fns radix-tree
emacsbug view skeleton misearch multi-isearch sgml-mode dom pcmpl-unix
pcmpl-gnu pp flow-fill gnus-fun gnus-mh sort gnus-async gnus-bcklg
gnus-kill gnus-dup gnus-ml disp-table url-http url-gw url-cache url-auth
url-handlers nnrss xml mm-url url url-proxy url-privacy url-expand
url-methods url-history url-cookie url-domsuf nndraft nnmh
network-stream nsm starttls gnus-agent gnus-srvr gnus-score score-mode
nnvirtual gnus-msg nntp gnus-cache dired-aux dired-x mh-funcs mh-thread
mh-identity mh-letter mh-comp url-util url-parse url-vars org-element
org-rmail org-mhe org-irc org-info org-gnus org-docview doc-view
jka-compr image-mode org-bibtex bibtex org-bbdb org-w3m org org-macro
org-footnote org-pcomplete org-list org-faces org-entities org-version
ob-emacs-lisp ob ob-tangle ob-ref ob-lob ob-table ob-exp org-src ob-keys
ob-comint ob-core ob-eval org-compat org-macs org-loaddefs find-func
cal-menu calendar cal-loaddefs vc-hg qp mm-archive mh-alias crm
mail-extr mh-mime mh-gnus mh-acros mh-show goto-addr thingatpt gnus-cite
gnus-art mm-uu mml2015 mm-view mml-smime smime dig mailcap gnus-sum
gnus-group gnus-undo gnus-start gnus-cloud nnimap nnmail mail-source tls
gnutls utf7 netrc nnoo parse-time gnus-spec gnus-int gnus-win gnus-range
gnus nnheader wid-edit mh-inc hl-line mh-tool-bar mh-seq mh-xface
mh-utils mh-folder which-func imenu mh-scan mh-e mh-compat mh-buffers
mh-loaddefs mdk-mail smtpmail auth-source cl-seq eieio eieio-core
cl-macs eieio-loaddefs sendmail message subr-x puny seq byte-opt
bytecomp byte-compile cl-extra help-mode cconv format-spec rfc822 mml
mml-sec password-cache epa derived epg epg-config gnus-util rmail
rmail-loaddefs mm-decode mm-bodies mm-encode mail-parse rfc2231 rfc2047
rfc2045 mm-util ietf-drums mail-prsvr mailabbrev mail-utils gmm-utils
mailheader server noutline outline easy-mmode cc-mode cc-fonts cc-guess
cc-menus cc-cmds cc-styles cc-align cc-engine cc-vars cc-defs cl gv
shell pcomplete comint ansi-color ring xcscope easymenu advice delsel vc
cl-loaddefs pcase cl-lib vc-dispatcher dired dired-loaddefs timeclock
mdk-hacks time-date mule-util tooltip eldoc electric uniquify ediff-hook
vc-hooks lisp-float-type mwheel term/x-win x-win term/common-win x-dnd
tool-bar dnd fontset image regexp-opt fringe tabulated-list replace
newcomment text-mode elisp-mode lisp-mode prog-mode register page
menu-bar rfn-eshadow isearch timer select scroll-bar mouse jit-lock
font-lock syntax facemenu font-core term/tty-colors frame cl-generic
cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao
korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech
european ethiopic indian cyrillic chinese composite charscript
case-table epa-hook jka-cmpr-hook help simple abbrev obarray minibuffer
cl-preloaded nadvice loaddefs button faces cus-face macroexp files
text-properties overlay sha1 md5 base64 format env code-pages mule
custom widget hashtable-print-readable backquote inotify dynamic-setting
font-render-setting x-toolkit x multi-tty make-network-process emacs)

Memory information:
((conses 16 334531 42157)
 (symbols 48 44642 1)
 (miscs 40 429 941)
 (strings 32 97784 18745)
 (string-bytes 1 3083356)
 (vectors 16 45101)
 (vector-slots 8 1532783 157208)
 (floats 8 525 644)
 (intervals 56 2775 535)
 (buffers 976 41)
 (heap 1024 70224 44977))

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Mike Kupfer <mkupfer@HIDDEN>
Subject: bug#25611: Acknowledgement (26.0.50; dired-do-compress unpacks
 .tgz files)
Message-ID: <handler.25611.B.148609384015314.ack <at> debbugs.gnu.org>
References: <3061.1486093822@alto>
X-Gnu-PR-Message: ack 25611
X-Gnu-PR-Package: emacs
Reply-To: 25611 <at> debbugs.gnu.org
Date: Fri, 03 Feb 2017 03:51:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-gnu-emacs@HIDDEN

If you wish to submit further information on this problem, please
send it to 25611 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
25611: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D25611
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-gnu-emacs@HIDDEN:

Subject: bug#25611: 26.0.50; dired-do-compress unpacks .tgz files
Resent-From: Glenn Morris <rgm@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnu-emacs@HIDDEN
Resent-Date: Fri, 03 Feb 2017 17:43:02 +0000
Resent-Message-ID: <handler.25611.B25611.14861437504776 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Mike Kupfer <mkupfer@HIDDEN>
Cc: 25611 <at> debbugs.gnu.org, ohwoeowho@HIDDEN
From: Glenn Morris <rgm@HIDDEN>
References: <3061.1486093822@alto>
Date: Fri, 03 Feb 2017 12:42:18 -0500
In-Reply-To: <3061.1486093822@alto> (Mike Kupfer's message of "Thu, 02 Feb
 2017 19:50:22 -0800")
Message-ID: <hslgtnjhmt.fsf@HIDDEN>
User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/)
MIME-Version: 1.0
Content-Type: text/plain
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Mike Kupfer wrote:

> Suppose I have a .tar file, I move point to that file in a dired buffer,
> and I press "Z".  My file gets converted to a .tgz file.  Okay so far.
>
> If I then press "Z" again, I expect to get the original .tar file back.
> Instead, the contents of the .tar file are extracted, and the .tgz file
> is left where it was.


Looks like this was added in https://debbugs.gnu.org/20384#11 ?
I've cc'd the author of that change.


> First problem: no .tar file.
>
> Second problem: this violates the principle of Least Surprise.  The
> prompt just talked about (de)compressing the file, it didn't say
> anything about unpacking it.  (Not to mention this is a departure from
> earlier behavior of "Z", and it's different behavior than what you'd get
> with a plain old text file.)
>
> Corollary to second problem: this can overwrite the user's existing
> files, causing the user to lose data.
>
> I can see the utility of the new behavior, but I think it should either
> be non-default behavior or bound to a different character in dired.  (I
> suppose you could just fix the prompt, but you'd lose the invertibility
> of the old "Z" behavior, which seems like a step backward.)

Message sent to bug-gnu-emacs@HIDDEN:

Subject: bug#25611: 26.0.50; dired-do-compress unpacks .tgz files
References: <3061.1486093822@alto>
Resent-From: Mike Kupfer <mkupfer@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnu-emacs@HIDDEN
Resent-Date: Sun, 05 Mar 2017 00:02:02 +0000
Resent-Message-ID: <handler.25611.B25611.148867211718555 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Glenn Morris <rgm@HIDDEN>
Cc: 25611 <at> debbugs.gnu.org, ohwoeowho@HIDDEN
From: Mike Kupfer <mkupfer@HIDDEN>
In-Reply-To: Your message of "Fri, 03 Feb 2017 12:42:18 -0500."
 <hslgtnjhmt.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <6061.1488672111.1@alto>
Date: Sat, 04 Mar 2017 16:01:51 -0800
Message-ID: <6062.1488672111@alto>
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Glenn Morris wrote:

> Looks like this was added in https://debbugs.gnu.org/20384#11 ?
> I've cc'd the author of that change.

Thanks.

It occurs to me that this could be considered a security vulnerability.
If the .tgz file is (unintentionally) unpacked in $HOME and contains a
.ssh/authorized_keys, that could give an attacker access to the victim's
account.

mike

Message sent to bug-gnu-emacs@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#25611: 26.0.50; dired-do-compress unpacks .tgz files
Resent-From: Oleh Krehel <ohwoeowho@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnu-emacs@HIDDEN
Resent-Date: Mon, 06 Mar 2017 10:54:01 +0000
Resent-Message-ID: <handler.25611.B25611.148879760322978 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 25611
X-GNU-PR-Package: emacs
X-GNU-PR-Keywords: 
To: Mike Kupfer <mkupfer@HIDDEN>
Cc: Glenn Morris <rgm@HIDDEN>, 25611 <at> debbugs.gnu.org
Received: via spool by 25611-submit <at> debbugs.gnu.org id=B25611.148879760322978
          (code B ref 25611); Mon, 06 Mar 2017 10:54:01 +0000
Received: (at 25611) by debbugs.gnu.org; 6 Mar 2017 10:53:23 +0000
Received: from localhost ([127.0.0.1]:41757 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ckqGZ-0005yX-3S
	for submit <at> debbugs.gnu.org; Mon, 06 Mar 2017 05:53:23 -0500
Received: from mail-oi0-f47.google.com ([209.85.218.47]:33515)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ohwoeowho@HIDDEN>) id 1ckqGX-0005yM-Vd
 for 25611 <at> debbugs.gnu.org; Mon, 06 Mar 2017 05:53:22 -0500
Received: by mail-oi0-f47.google.com with SMTP id 2so82712134oif.0
 for <25611 <at> debbugs.gnu.org>; Mon, 06 Mar 2017 02:53:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=mime-version:in-reply-to:references:from:date:message-id:subject:to
 :cc; bh=jkuQwqawoMcFEVQJORLVPOVJvwJvfqSHmg7JB/W7+bE=;
 b=HzxOcWHPD2GfhHpCLmCBZ0rptsEeuMzQkGPkZuOwnPy2xln6i8TSGV1MyDV3E6iyW2
 ODJjuWlCF8BT6YTIGmSajtJWN2tLWloTK3L2w7BbMC8wFUmzOVamc+dfxI+YFkQw5o9W
 Z/2Jg++MXi+f8nv7MxSZqi9hnnzq8xjR3RucGeEoIfR+LjO8n45w1DtAO0M557eGDS7Z
 L9yny8wz2PXtL3EIjS53Qsmgmj+wp5jN+CZ7Alwo6iO7JYoqNoucNMR2OdEM7cxnLRUO
 Hh72nuvEorG2Dir2G/1mEii6PnAjl8jMVyp5wILIEOJV8eyr7uJU+qLp0ybOaa3q8G1m
 DBlQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:in-reply-to:references:from:date
 :message-id:subject:to:cc;
 bh=jkuQwqawoMcFEVQJORLVPOVJvwJvfqSHmg7JB/W7+bE=;
 b=BWD+7xOblH2iwl9Y3Ok9Lt/5OAw8jTzPDPyDuF/O+v8AHegRD213JKVUvbEHNOFao9
 4HqFIW+L/Ur3Mm5PUpzfBOqzn1UnxAvICacUuVbn3Du3a0f/5BHb6gNbVmzgY3mh9orG
 1Ed4+LC/BmrU23xMP3XekAshQHJhFiXFvYkkZC5nbJVFgfSw7JrnPMPoj39+RHo4phAQ
 CZqs5x6HxYm/J/AfB1GRaD1j/7jPZv1J4LqB1q9vSA6eDguXcEQgIjNkFhrO3q9w3t4D
 /qap1oLQc0lYezgGWTPxJjt8yRNgll9gG5uSLX5FE/k+fKyO2YxAhOZ0/NYEXOTnizPg
 xxBw==
X-Gm-Message-State: AMke39mAAAvn5wCvzexQTBYFAORnqsVE4TpfswmOYlDxnvbEZ4NBiCTygymm23y0DCwBIknfTkSvTFjUgVWQbA==
X-Received: by 10.202.68.132 with SMTP id r126mr5749678oia.32.1488797596187;
 Mon, 06 Mar 2017 02:53:16 -0800 (PST)
MIME-Version: 1.0
Received: by 10.202.169.209 with HTTP; Mon, 6 Mar 2017 02:53:15 -0800 (PST)
In-Reply-To: <6062.1488672111@alto>
References: <hslgtnjhmt.fsf@HIDDEN> <6062.1488672111@alto>
From: Oleh Krehel <ohwoeowho@HIDDEN>
Date: Mon, 6 Mar 2017 11:53:15 +0100
Message-ID: <CAA01p3o=skAf=SNCtykM6XWrXvpEVoR9yQaHEkCTMsso9q5hbA@HIDDEN>
Content-Type: text/plain; charset=UTF-8
X-Spam-Score: 0.4 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.4 (/)

Hi Mike,

> It occurs to me that this could be considered a security vulnerability.
> If the .tgz file is (unintentionally) unpacked in $HOME and contains a
> .ssh/authorized_keys, that could give an attacker access to the victim's
> account.

The file is uncompressed into a directory with the same name. So the
file would have to be ~/.ssh.tar.gz. If a user presses "Z" on that
file, it's pretty clear what will happen, same as with "C" on e.g. an
`authorized_keys' file somewhere.

regards,
Oleh

Message sent to bug-gnu-emacs@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#25611: 26.0.50; dired-do-compress unpacks .tgz files
References: <3061.1486093822@alto>
Resent-From: Mike Kupfer <mkupfer@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnu-emacs@HIDDEN
Resent-Date: Mon, 06 Mar 2017 17:29:02 +0000
Resent-Message-ID: <handler.25611.B25611.14888213373890 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 25611
X-GNU-PR-Package: emacs
X-GNU-PR-Keywords: 
To: Oleh Krehel <ohwoeowho@HIDDEN>
Cc: Glenn Morris <rgm@HIDDEN>, 25611 <at> debbugs.gnu.org
Received: via spool by 25611-submit <at> debbugs.gnu.org id=B25611.14888213373890
          (code B ref 25611); Mon, 06 Mar 2017 17:29:02 +0000
Received: (at 25611) by debbugs.gnu.org; 6 Mar 2017 17:28:57 +0000
Received: from localhost ([127.0.0.1]:43041 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ckwRN-00010g-BV
	for submit <at> debbugs.gnu.org; Mon, 06 Mar 2017 12:28:57 -0500
Received: from shell1.rawbw.com ([198.144.192.42]:27832 ident=root)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mkupfer@HIDDEN>) id 1ckwRL-00010Y-HK
 for 25611 <at> debbugs.gnu.org; Mon, 06 Mar 2017 12:28:56 -0500
Received: from alto (m208-249.dsl.rawbw.com [198.144.208.249])
 by shell1.rawbw.com (8.15.1/8.15.1) with ESMTP id v26HSr6f007347;
 Mon, 6 Mar 2017 09:28:53 -0800 (PST)
 (envelope-from mkupfer@HIDDEN)
X-Authentication-Warning: shell1.rawbw.com: Host m208-249.dsl.rawbw.com
 [198.144.208.249] claimed to be alto
From: Mike Kupfer <mkupfer@HIDDEN>
In-Reply-To: Your message of "Mon, 06 Mar 2017 11:53:15 +0100."
 <CAA01p3o=skAf=SNCtykM6XWrXvpEVoR9yQaHEkCTMsso9q5hbA@HIDDEN>
X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 25.2.1
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <22646.1488821333.1@alto>
Date: Mon, 06 Mar 2017 09:28:53 -0800
Message-ID: <22647.1488821333@alto>
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.0 (/)

Hi Oleh,

Oleh Krehel wrote:

> > It occurs to me that this could be considered a security vulnerability.
> > If the .tgz file is (unintentionally) unpacked in $HOME and contains a
> > .ssh/authorized_keys, that could give an attacker access to the victim's
> > account.
> 
> The file is uncompressed into a directory with the same name. So the
> file would have to be ~/.ssh.tar.gz. If a user presses "Z" on that
> file, it's pretty clear what will happen, same as with "C" on e.g. an
> `authorized_keys' file somewhere.

That might be the intended usage, but my testing[1] shows that there's
no enforcement.  I created by hand a Desktop.tgz by doing

    tar cf Desktop.tar Desktop .ssh/known_hosts

and then compressing Desktop.tar.  (I don't use an authorized_keys file
on the system that I ran the test on.)  I moved Desktop.tgz to a temp
directory and then pressed "Z" on it.  It unpacked Desktop okay, but it
also created .ssh/known_hosts.

I also tried editing one of the files in <temp_dir>/Desktop and redoing
"Z" on Desktop.tgz.  That silently overwrote my change.

So I think two changes are needed: one to eliminate the security risk,
the second to protect against accidental data loss.

The security risk would be closed by ensuring that foo.<suffix> only
unpacks into "foo".  This could be done by checking the table of
contents of the tar file and erroring out if anything is amiss.  Another
approach would be to invoke tar as "tar xf ... foo".  The first approach
gives better feedback to the user if there is something amiss with the
tar file, but it'll take more code.  (GNU tar, at least, protects
against things like foo/../.ssh/mumble; I don't know about other
variants of tar.)

To protect against accidental data loss, I recommend erroring out if
"foo" already exists, or asking the user for confirmation before
proceeding.

regards,
mike

[1] Emacs master, changeset 18c47695 from 21 February, running on Debian
stable.

Message sent to bug-gnu-emacs@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#25611: 26.0.50; dired-do-compress unpacks .tgz files
Resent-From: Glenn Morris <rgm@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnu-emacs@HIDDEN
Resent-Date: Mon, 06 Mar 2017 17:53:02 +0000
Resent-Message-ID: <handler.25611.B25611.148882272313065 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 25611
X-GNU-PR-Package: emacs
X-GNU-PR-Keywords: 
To: Mike Kupfer <mkupfer@HIDDEN>
Cc: 25611 <at> debbugs.gnu.org, ohwoeowho@HIDDEN
Received: via spool by 25611-submit <at> debbugs.gnu.org id=B25611.148882272313065
          (code B ref 25611); Mon, 06 Mar 2017 17:53:02 +0000
Received: (at 25611) by debbugs.gnu.org; 6 Mar 2017 17:52:03 +0000
Received: from localhost ([127.0.0.1]:43071 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ckwni-0003Of-RQ
	for submit <at> debbugs.gnu.org; Mon, 06 Mar 2017 12:52:03 -0500
Received: from eggs.gnu.org ([208.118.235.92]:58881)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <rgm@HIDDEN>) id 1ckwni-0003OC-0V
 for 25611 <at> debbugs.gnu.org; Mon, 06 Mar 2017 12:52:02 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <rgm@HIDDEN>) id 1ckwnc-0004pr-4B
 for 25611 <at> debbugs.gnu.org; Mon, 06 Mar 2017 12:51:56 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:51017)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <rgm@HIDDEN>)
 id 1ckwnZ-0004pI-V2; Mon, 06 Mar 2017 12:51:53 -0500
Received: from rgm by fencepost.gnu.org with local (Exim 4.82)
 (envelope-from <rgm@HIDDEN>)
 id 1ckwnZ-0005P2-5q; Mon, 06 Mar 2017 12:51:53 -0500
From: Glenn Morris <rgm@HIDDEN>
References: <6062.1488672111@alto>
X-Spook: Smallpox munitions CISU cracking quiche Baranyi SCUD
X-Ran: 34(lpQW)aaW"2G9W{U~1S"7%:UxiiQZ]6F_!)'(}DDz@t[`slpR"'e_/)!ue{A*\@].52/
X-Hue: blue
X-Attribution: GM
Date: Mon, 06 Mar 2017 12:51:53 -0500
In-Reply-To: <6062.1488672111@alto> (Mike Kupfer's message of "Sat, 04 Mar
 2017 16:01:51 -0800")
Message-ID: <lplgsiz41y.fsf@HIDDEN>
User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/)
MIME-Version: 1.0
Content-Type: text/plain
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -5.0 (-----)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -5.0 (-----)

Mike Kupfer wrote:

> It occurs to me that this could be considered a security vulnerability.

I'm not sure I agree, but regardless I do not expect a command that
"compresses or uncompresses files" to extract a tar file. These should
be separate steps/commands IMO. Exactly as you said in your initial
report.

Message sent to bug-gnu-emacs@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#25611: 26.0.50; dired-do-compress unpacks .tgz files
References: <3061.1486093822@alto>
Resent-From: Mike Kupfer <mkupfer@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnu-emacs@HIDDEN
Resent-Date: Mon, 06 Mar 2017 18:43:01 +0000
Resent-Message-ID: <handler.25611.B25611.148882575124686 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 25611
X-GNU-PR-Package: emacs
X-GNU-PR-Keywords: 
To: Glenn Morris <rgm@HIDDEN>
Cc: 25611 <at> debbugs.gnu.org, ohwoeowho@HIDDEN
Received: via spool by 25611-submit <at> debbugs.gnu.org id=B25611.148882575124686
          (code B ref 25611); Mon, 06 Mar 2017 18:43:01 +0000
Received: (at 25611) by debbugs.gnu.org; 6 Mar 2017 18:42:31 +0000
Received: from localhost ([127.0.0.1]:43137 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ckxaZ-0006Q6-2v
	for submit <at> debbugs.gnu.org; Mon, 06 Mar 2017 13:42:31 -0500
Received: from shell1.rawbw.com ([198.144.192.42]:15648 ident=root)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mkupfer@HIDDEN>) id 1ckxaW-0006Px-NF
 for 25611 <at> debbugs.gnu.org; Mon, 06 Mar 2017 13:42:29 -0500
Received: from alto (m208-249.dsl.rawbw.com [198.144.208.249])
 by shell1.rawbw.com (8.15.1/8.15.1) with ESMTP id v26IgOkp017646;
 Mon, 6 Mar 2017 10:42:25 -0800 (PST)
 (envelope-from mkupfer@HIDDEN)
X-Authentication-Warning: shell1.rawbw.com: Host m208-249.dsl.rawbw.com
 [198.144.208.249] claimed to be alto
From: Mike Kupfer <mkupfer@HIDDEN>
In-Reply-To: Your message of "Mon, 06 Mar 2017 12:51:53 -0500."
 <lplgsiz41y.fsf@HIDDEN>
X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 25.2.1
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <26462.1488825744.1@alto>
Date: Mon, 06 Mar 2017 10:42:24 -0800
Message-ID: <26463.1488825744@alto>
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.0 (/)

Glenn Morris wrote:

> [...] I do not expect a command that
> "compresses or uncompresses files" to extract a tar file. These should
> be separate steps/commands IMO. Exactly as you said in your initial
> report.

That would be my preference, too.  I'm just not sure how much of that
preference comes from mental inertia. :-) That's why my later emails
focused on the data loss and security angles.

If we do keep the extraction functionality, the docstring for
dired-do-compress definitely needs updating.

cheers,
mike

Message sent to bug-gnu-emacs@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#25611: 26.0.50; dired-do-compress unpacks .tgz files
References: <3061.1486093822@alto>
Resent-From: Mike Kupfer <mkupfer@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnu-emacs@HIDDEN
Resent-Date: Mon, 06 Mar 2017 19:04:01 +0000
Resent-Message-ID: <handler.25611.B25611.148882700226710 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 25611
X-GNU-PR-Package: emacs
X-GNU-PR-Keywords: 
To: Glenn Morris <rgm@HIDDEN>
Cc: 25611 <at> debbugs.gnu.org, ohwoeowho@HIDDEN
Received: via spool by 25611-submit <at> debbugs.gnu.org id=B25611.148882700226710
          (code B ref 25611); Mon, 06 Mar 2017 19:04:01 +0000
Received: (at 25611) by debbugs.gnu.org; 6 Mar 2017 19:03:22 +0000
Received: from localhost ([127.0.0.1]:43167 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ckxuk-0006wk-Ag
	for submit <at> debbugs.gnu.org; Mon, 06 Mar 2017 14:03:22 -0500
Received: from shell1.rawbw.com ([198.144.192.42]:31225 ident=root)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mkupfer@HIDDEN>) id 1ckxuh-0006wa-3S
 for 25611 <at> debbugs.gnu.org; Mon, 06 Mar 2017 14:03:19 -0500
Received: from alto (m208-249.dsl.rawbw.com [198.144.208.249])
 by shell1.rawbw.com (8.15.1/8.15.1) with ESMTP id v26J3G6C020515;
 Mon, 6 Mar 2017 11:03:17 -0800 (PST)
 (envelope-from mkupfer@HIDDEN)
X-Authentication-Warning: shell1.rawbw.com: Host m208-249.dsl.rawbw.com
 [198.144.208.249] claimed to be alto
From: Mike Kupfer <mkupfer@HIDDEN>
In-Reply-To: My message of "Mon, 06 Mar 2017 10:42:24 -0800."
 <26463.1488825744@alto>
X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 25.2.1
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <27655.1488826996.1@alto>
Date: Mon, 06 Mar 2017 11:03:16 -0800
Message-ID: <27656.1488826996@alto>
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.0 (/)

Mike Kupfer wrote:

> If we do keep the extraction functionality, the docstring for
> dired-do-compress definitely needs updating.

Sorry, that should have been "docstring and prompt".

mike

Message sent to bug-gnu-emacs@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#25611: 26.0.50; dired-do-compress unpacks .tgz files
Resent-From: Glenn Morris <rgm@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnu-emacs@HIDDEN
Resent-Date: Wed, 21 Nov 2018 18:14:02 +0000
Resent-Message-ID: <handler.25611.B25611.15428240409828 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 25611
X-GNU-PR-Package: emacs
X-GNU-PR-Keywords: 
To: 25611 <at> debbugs.gnu.org
Cc: ohwoeowho@HIDDEN, Mike Kupfer <mkupfer@HIDDEN>
Received: via spool by 25611-submit <at> debbugs.gnu.org id=B25611.15428240409828
          (code B ref 25611); Wed, 21 Nov 2018 18:14:02 +0000
Received: (at 25611) by debbugs.gnu.org; 21 Nov 2018 18:14:00 +0000
Received: from localhost ([127.0.0.1]:40056 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1gPX0i-0002YR-Gn
	for submit <at> debbugs.gnu.org; Wed, 21 Nov 2018 13:14:00 -0500
Received: from eggs.gnu.org ([208.118.235.92]:47733)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <rgm@HIDDEN>) id 1gPX0g-0002YE-JH
 for 25611 <at> debbugs.gnu.org; Wed, 21 Nov 2018 13:13:58 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <rgm@HIDDEN>) id 1gPX0a-0006RE-To
 for 25611 <at> debbugs.gnu.org; Wed, 21 Nov 2018 13:13:53 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.0 required=5.0 tests=BAYES_20 autolearn=disabled
 version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:53649)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <rgm@HIDDEN>)
 id 1gPX0a-0006R5-Qh; Wed, 21 Nov 2018 13:13:52 -0500
Received: from rgm by fencepost.gnu.org with local (Exim 4.82)
 (envelope-from <rgm@HIDDEN>)
 id 1gPX0Z-0003oq-Ib; Wed, 21 Nov 2018 13:13:51 -0500
From: Glenn Morris <rgm@HIDDEN>
References: <3061.1486093822@alto> <27656.1488826996@alto>
X-Spook: Cocaine Suspicious substance strategic Blowpipe Cain and
X-Ran: `@|fW`~jZK5v<N{>$9~s?.*FE{4Sa~O*}d`#-ck]3e50$9!2'fSJS@$k$b\NbB[C_,}Wud
X-Hue: cyan
X-Attribution: GM
Date: Wed, 21 Nov 2018 13:13:51 -0500
In-Reply-To: <27656.1488826996@alto> (Mike Kupfer's message of "Mon, 06 Mar
 2017 11:03:16 -0800")
Message-ID: <99a7m2i9i8.fsf@HIDDEN>
User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/)
MIME-Version: 1.0
Content-Type: text/plain
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -5.0 (-----)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -6.0 (------)


Comments from rms:

http://lists.gnu.org/r/emacs-devel/2018-11/msg00268.html

    It does not literally make sense to "decompress" an archive.  Any kind
    of archive.  That stretches the meaning of "decompress".

    Such stretching might be ok, if it led to no confusion or conflict.
    However, what we see is that it does lead to confusion.  So Z should
    not unpack archives -- not even zip archives.

    Instead, we should have a different letter for unpacking archives.
    I suggest moving dired-do-find-regexp to F
    ad defining A to unpacking an archive.

Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.