bugGNU nano - Bugs: bug #31625, Restricted mode broken by key...

 
 

bug #31625: Restricted mode broken by key bindings

Submitted by:  Chris Allegretta <astyanax>
Submitted on:  Fri 12 Nov 2010 05:19:04 AM UTC  
 
Category: NoneSeverity: 4 - Important
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: Chris Allegretta <astyanax>
Open/Closed: ClosedRelease: None

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 12 Nov 2010 09:14:29 AM UTC, comment #3:

Cheers, works fine over here.

Charlie Somerville <charliesome>
Fri 12 Nov 2010 06:26:44 AM UTC, comment #2:

Alright, sorry for that, it seems that when I implemented the key bindings code the checks for restricted mode were suddenly being bypassed. This should now be fixed in trunk and in the 2.2 branch with r4520. I'm putting up a test tarball at http://www.nano-editor.org/dist/test/nano-2.2.6pre1.tar.gz if you'd like to give it a try and let me know if it works for you.

Chris Allegretta <astyanax>
Project AdministratorIn charge of this item.
Fri 12 Nov 2010 05:20:09 AM UTC, comment #1:

have a fix for this, just running it through the regression script before checking in.

Chris Allegretta <astyanax>
Project AdministratorIn charge of this item.
Fri 12 Nov 2010 05:19:04 AM UTC, original submission:

Per email:

The man page for nano claims that:

>> In restricted mode, nano will not:
>> * read or write to any file not specified on the command line;


However, it is still possible to read arbitrary files that are not
specified on the command line by tapping the INS key and typing a
filename, like /etc/passwd, for example.

I hope this is fixed as I'm planning to use nano as the message editor in my BBS software, and I do not want users being able to access any file on the system.

Chris Allegretta <astyanax>
Project AdministratorIn charge of this item.

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by bens (Updated the item)
  • -unavailable- added by charliesome (Posted a comment)
  • -unavailable- added by astyanax (Submitted the item)
  • -unavailable- added by astyanax
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 6 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon 24 Feb 2014 07:18:57 PM UTCbensStatusReady For Test=>Fixed
      Open/ClosedOpen=>Closed
    Fri 12 Nov 2010 06:26:44 AM UTCastyanaxStatusIn Progress=>Ready For Test
    Fri 12 Nov 2010 05:20:26 AM UTCastyanaxSummaryRestericted mode broken by key bindings=>Restricted mode broken by key bindings
    Fri 12 Nov 2010 05:20:09 AM UTCastyanaxStatusNone=>In Progress
    Fri 12 Nov 2010 05:19:04 AM UTCastyanaxCarbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup