# HG changeset patch # User Chong Yidong # Date 1153275771 0 # Node ID 0429cbee770ada203bd09d44e831fb887bd19406 # Parent 020b2d549ca82beb8b32fb11ee27890bf10a17ef * faq.texi (Security risks with Emacs): Document Emacs 22 file-local-variable mechanism. diff -r 020b2d549ca8 -r 0429cbee770a man/ChangeLog --- a/man/ChangeLog Wed Jul 19 02:19:59 2006 +0000 +++ b/man/ChangeLog Wed Jul 19 02:22:51 2006 +0000 @@ -1,3 +1,8 @@ +2006-07-18 Chong Yidong + + * faq.texi (Security risks with Emacs): Document Emacs 22 + file-local-variable mechanism. + 2006-07-17 Richard Stallman * building.texi (Grep Searching): Explain about chaining grep commands. diff -r 020b2d549ca8 -r 0429cbee770a man/faq.texi --- a/man/faq.texi Wed Jul 19 02:19:59 2006 +0000 +++ b/man/faq.texi Wed Jul 19 02:22:51 2006 +0000 @@ -3125,14 +3125,12 @@ Obviously, there is a potential for Trojan horses to exploit this feature. -Emacs 18 allowed this feature by default; users could disable it by -setting the variable @code{inhibit-local-variables} to a non-@code{nil} value. - -As of Emacs 19, Emacs has a list of local variables that create a -security risk. If a file tries to set one of them, it asks the user to -confirm whether the variables should be set. You can also tell Emacs -whether to allow the evaluation of Emacs Lisp code found at the bottom -of files by setting the variable @code{enable-local-eval}. +As of Emacs 22, Emacs has a list of local variables that are known to +be safe to set. If a file tries to set any variable outside this +list, it asks the user to confirm whether the variables should be set. +You can also tell Emacs whether to allow the evaluation of Emacs Lisp +code found at the bottom of files by setting the variable +@code{enable-local-eval}. For more information, @inforef{File Variables, File Variables, emacs}.