Re: 22.1.50; insert-file-contents is slow under tramp

[David Kastrup]

Stefan Monnier <address@hidden> writes:

>> The current approach(1) is to remove any temporary file immediately after
>> it has been processes by Emacs (for example, insert-file-contents is
>> finished).  This reduces the time nasty third party can see such a file.
>
> If the file is readable, that's a major security concern.
>
>> But I admit, this might not be sufficient wrt security threats.  Maybe
>> one could change it such a way, that temporary files shall be owned by
>> (user-login-name), and shall carry 0400 permissions.
>
> How can you do that?  Let's say I access a file of user BAR from
> user FOO, how would you go about doing it in such a way that user
> TOTO can never see the content of the file?  BAR can't use `chown'
> (unless it's root).

Huh?  We are talking about tramp here.  The file is transferred
through a ssh session.  On the receiving side, you'll be free to
create a file with whatever permissions you want, and on the sending
side, no change of permissions is required to access the file.

-- 
David Kastrup