GNU nano - Bugs: bug #65819, {backup} in a string bind can...

You are not allowed to post comments on this tracker with your current authentication level.

bug #65819: {backup} in a string bind can sidestep restricted mode

Submitter:	Benno Schulenberg <bens>
Submitted:	Fri 31 May 2024 11:00:36 AM UTC
Severity:	3 - Normal	Status:	Fixed
Assigned to:	bens	Open/Closed:	Closed

Sat 01 Jun 2024 09:38:36 AM UTC, comment #1:  Fixed in git, commit 68974884, by conditionalizing the toggling of the Backup flag (and the Append and Prepend flags, and the Browser function) on not being in restricted mode.	Benno Schulenberg <bens>
Fri 31 May 2024 11:00:36 AM UTC, original submission:   To reproduce, do: rm -v README~ echo 'bind ^P "{backup}" writeout' >sneakrc src/nano --rc=sneakrc --restrict  README Then type: ^O ^P See that "[Backup]" has been activated, even though this should not be possible in restricted mode. Now type: <Enter> ^X Followed by: ls -l README* See that a README~ backup file was written.	Benno Schulenberg <bens>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List

-email is unavailable- added by bens (Submitted the item)

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

Follow 2 latest changes.

Date	Changed by	Updated Field	Previous Value	=>	Replaced by
2024-07-13	bens	Open/Closed	Open		Closed
2024-06-01	bens	Status	None		Fixed

Copyright © 2025 Free Software Foundation, Inc.
Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
Page source code