Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
5 votes
1 answer
472 views

Can I mark a local variable as safe for a single file only?

I have a LaTeX-file (thesis.tex) which I edit daily. Some LaTeX-package I use requires me to compile the file with --shell-escape, so I added the file-local variable %%% TeX-command-extra-options: &...
red_trumpet's user avatar
1 vote
2 answers
177 views

Avoid placing safe-local-variable-values in init file

I have a project with a .dir-locals.el file. This file contains some customizations for various project local variables, e.g. include directories for semantic and arguments for clang. First time ...
alexpanter's user avatar
2 votes
1 answer
42 views

risky file local “outline-level”

I'm reading (info "(emacs) 25.9.1 Format of Outlines"): can explicitly specify a rule for calculating the level of a heading line by setting the variable outline-level. ...... The ...
shynur's user avatar
  • 5,308
0 votes
1 answer
171 views

At the time of prompting for a password (from a subordinate shell), sometimes Emacs hides the password, sometimes not. Why the inconsistency?

I use shells running under Emacs (via M-x shell) under a variety of settings1. In all these settings, I use the same .emacs file. Nevertheless I observe an inconsistency, as described below. In some ...
kjo's user avatar
  • 3,247
0 votes
0 answers
77 views

Understanding certificate security warning

I'm encountering the below warning about a change in the fingerprint for a server I regularly connect to: Certificate information Issued by: R3 Issued to: CN=sms.erjoalgo.com ...
erjoalgo's user avatar
  • 863
0 votes
2 answers
1k views

Elpa + Melpa Certificate information issue at startup

I hadn't used Emacs for a few weeks and when I started it up I discovered issues with certificate information for elpa, melpa and orgmode. When I launch Emacs I get the following message: The TLS ...
twicetwice's user avatar
2 votes
1 answer
178 views

How to avoid emacs pop-up security warning for code eval

How to disable this pop-up warning for orgmode commands such as: shell:ls *.org For which I would wish just to click once? Thanks!
Adelita's user avatar
  • 155
0 votes
1 answer
349 views

How to use an Easy PG encrypted custom-file?

So, inspired by this article. I decided to try adding the following to my init.el: (setq custom-file (expand-file-name "secret.el" user-emacs-directory)) (load custom-file) Where the file in ...
HaoZeke's user avatar
  • 145
2 votes
1 answer
293 views

How can I create secrets for use with the Secrets API auth-source?

Trying to create new secrets in the GNOME keyring via auth-source results in The Secrets API auth-source backend doesn’t support creation yet How can I manually create this secret?
Felipe's user avatar
  • 329
3 votes
1 answer
216 views

Secure random numbers

I'd like to generate some random passwords using Emacs, and thus need a secure random number generator. I don't like that 'random might be seeded from system time I'd feel most comfortable just ...
Felipe's user avatar
  • 329
0 votes
0 answers
526 views

MELPA's public key

I'd like to install Magit. According to the Installation chapter of the Magit user manual Magit is available from Melpa and Melpa-Stable. If you haven’t used Emacs’ package manager before, then it is ...
Evan Aad's user avatar
  • 1,541
8 votes
1 answer
3k views

Execute org-mode source blocks without security confirmation

I only want to turn off the warnings for certain source block languages. I couldn't find an answer to this anywhere, only how to turn off the confirmation requests for all languages: (setq org-...
n1k31t4's user avatar
  • 689
24 votes
2 answers
7k views

How to automatically sign commits with magit?

I'm interested on having each of my commits signed with my GPG key. Since I use magit for interfacing with git, I was wondering if telling magit to sign each commit was possible (or some workaround to ...
shackra's user avatar
  • 2,782
2 votes
2 answers
107 views

Will there be security updates to Emacs 24.3?

I am trying to make the case to my employer that updating from Emacs 24.3 to Emacs 24.5 is the right thing to do. The (understandable) justification for sticking with version 24.3 is that it is ...
nispio's user avatar
  • 8,225
9 votes
1 answer
365 views

How do I verify a large package in a git repo is safe?

I'm looking at emacs helm specifically, which has the following properties: it has thousands of commits it is largely maintained by one user the maintainer has no other profiles (social media, etc.) ...
djechlin's user avatar
  • 923
2 votes
2 answers
141 views

crypto-newbie: how to securely sign outgoing email with `smtpmail` (or simplest alternative)?

I'm running $ cat /etc/debian_version jessie/sid $ uname -rv 3.11-2-amd64 #1 SMP Debian 3.11.8-1 (2013-11-13) $ gcc --version | head -n 1 gcc (Debian 4.8.2-1) 4.8.2 $ emacs --version | head -n 1 GNU ...
TomRoche's user avatar
  • 632
8 votes
2 answers
2k views

How do you select under emacs the key you sign/encrypt with when using mml?

Long time mutt user, I am currently trying to learn how to deal with my mail from within emacs with the help of mu4e. When it comes to signing mail, I use the following (add-hook 'message-send-hook '...
csantosb's user avatar
  • 1,065
8 votes
1 answer
553 views

How to prevent shr from making network connections

Recent versions of Emacs have a really good renderer for HTML written entirely in Elisp. This renderer (shr) can be used for displaying HTML emails, documentation, etc. However, it seems that shr ...
tmalsburg's user avatar
  • 2,570
9 votes
2 answers
362 views

Configure jabber without writing password in plain text

I find jabber to be a fantastic tool, but it worries me a little that my password is written in plain text in my init file. Is there a way to configure my jabber login credentials without writing them ...
Malabarba's user avatar
  • 23.2k
15 votes
2 answers
5k views

Safe way to `enable-local-variables`?

I inherited my .emacs file from a friend about 18 years ago. Buried in the middle is the following ominous comment warning about the security implications of the enable-local-variables feature: ;; ...
Wandering Logic's user avatar