From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/14337 Path: main.gmane.org!not-for-mail From: Jason R Mastaler Newsgroups: gmane.emacs.gnus.general Subject: Re: feedback on AUTHINFO in qgnus-0.27 Date: 27 Feb 1998 21:27:29 -0700 Sender: owner-ding@hpc.uh.edu Message-ID: References: <199802231806.NAA23998@alderaan.gsfc.nasa.gov> NNTP-Posting-Host: coloc-standby.netfonds.no Mime-Version: 1.0 (generated by tm-edit 7.108) Content-Type: text/plain; charset=US-ASCII X-Trace: main.gmane.org 1035153545 14334 80.91.224.250 (20 Oct 2002 22:39:05 GMT) X-Complaints-To: usenet@main.gmane.org NNTP-Posting-Date: Sun, 20 Oct 2002 22:39:05 +0000 (UTC) Return-Path: Original-Received: from xemacs.org (xemacs.cs.uiuc.edu [128.174.252.16]) by altair.xemacs.org (8.8.8/8.8.8) with ESMTP id UAA28789 for ; Fri, 27 Feb 1998 20:33:53 -0800 Original-Received: from sina.hpc.uh.edu (root@Sina.HPC.UH.EDU [129.7.3.5]) by xemacs.org (8.8.5/8.8.5) with ESMTP id WAA08583 for ; Fri, 27 Feb 1998 22:29:41 -0600 (CST) Original-Received: from sina.hpc.uh.edu (lists@Sina.HPC.UH.EDU [129.7.3.5]) by sina.hpc.uh.edu (8.7.3/8.7.3) with ESMTP id WAH28153; Fri, 27 Feb 1998 22:29:32 -0600 (CST) Original-Received: by sina.hpc.uh.edu (TLB v0.09a (1.20 tibbs 1996/10/09 22:03:07)); Fri, 27 Feb 1998 22:28:23 -0600 (CST) Original-Received: from claymore.vcinet.com (claymore.vcinet.com [208.205.12.23]) by sina.hpc.uh.edu (8.7.3/8.7.3) with SMTP id WAA28140 for ; Fri, 27 Feb 1998 22:28:15 -0600 (CST) Original-Received: (qmail 24530 invoked by uid 504); 28 Feb 1998 04:28:08 -0000 Original-Received: (qmail 24527 invoked from network); 28 Feb 1998 04:28:04 -0000 Original-Received: from camel14.mindspring.com (207.69.200.64) by claymore.vcinet.com with SMTP; 28 Feb 1998 04:28:04 -0000 Original-Received: from ashanti.mastaler.com (ip96.albuquerque.nm.pub-ip.psi.net [38.11.185.96]) by camel14.mindspring.com (8.8.5/8.8.5) with ESMTP id XAA21483 for ; Fri, 27 Feb 1998 23:28:00 -0500 (EST) Original-Received: (from jason@localhost) by ashanti.mastaler.com (8.8.5/8.8.5) id VAA01284; Fri, 27 Feb 1998 21:27:31 -0700 (MST) Original-To: ding@gnus.org In-Reply-To: Lars Magne Ingebrigtsen's message of "27 Feb 1998 12:56:21 +0100" Original-Lines: 21 X-Mailer: Quassia Gnus v0.32/XEmacs 20.5(beta27) - "Kinder" Precedence: list X-Majordomo: 1.94.jlt7 Xref: main.gmane.org gmane.emacs.gnus.general:14337 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:14337 Lars Magne Ingebrigtsen writes: > > Have you added any permission checks to Gnus? FTP gives an error if passwords > > are listed in ~/.netrc and the permissions are not 600. I think it would be > > wise if Gnus would do the same thing. > > I dunno. Why should programs police the behaviors of users? Because users are often careless, and their careless actions can result in dire consequences. It's more of a courtesy and security safegaurd than a censor. Think of it another way. When would anyone ever _not_ want permissions of 600 on a plaintext file containing passwords? If you are opposed to Gnus refusing to use a .authinforc with incorrect permissions, than maybe just have it print an appropriate warning but still run, thus allowing the user to make a more informed choice?