Re: $TMPDIR (was Re: Security: Mutt and mailcap rules)

2019-06-25 Thread Derek Martin
On Tue, Jun 25, 2019 at 09:11:22PM +0200, Vincent Lefevre wrote: > On 2019-06-24 17:18:27 -0500, Derek Martin wrote: > > Mutt honors $TMPDIR. You should set it. You should probably not use > > /tmp, especially on a multi-user system, especially if you care about > > security (privacy to be more pr

Re: $TMPDIR (was Re: Security: Mutt and mailcap rules)

2019-06-25 Thread Vincent Lefevre
On 2019-06-24 17:18:27 -0500, Derek Martin wrote: > Mutt honors $TMPDIR. You should set it. You should probably not use > /tmp, especially on a multi-user system, especially if you care about > security (privacy to be more precise, but that's part of security). > You should probably also not put i

Re: meaning of number of lines in the message (%l in index_format)

2019-06-25 Thread Vincent Lefevre
On 2019-06-25 19:46:39 +0200, Moritz Barsnick wrote: > I agree. OTOH, I have received messages with large one-liner HTML > attachments which obviously seemed small. Or people write plain text > paragraphs without breaking lines ... I've noticed that too. > %c is what shows the size of the message

Re: Security: Mutt and mailcap rules

2019-06-25 Thread Vincent Lefevre
On 2019-06-24 10:13:43 +1000, Cameron Simpson wrote: > On 23Jun2019 12:36, vincent lefevre wrote: > > I'm not sure whether this is a good idea. The temporary directory > > may be (and often is) world-writable, and on multi-user machines, > > this increases the risk of vulnerability. For instance,

Re: meaning of number of lines in the message (%l in index_format)

2019-06-25 Thread Moritz Barsnick
On Tue, Jun 25, 2019 at 10:45:07 -0500, Derek Martin wrote: > On Tue, Jun 25, 2019 at 10:33:11AM -0500, Derek Martin wrote: > > > On Monday, 2019-06-24 18:41:56 -0500, Derek Martin wrote: > > > > Or just remove it. If it's not accurate (or even if it is) what value > > > > can it really provide? >

Re: meaning of number of lines in the message (%l in index_format)

2019-06-25 Thread Derek Martin
On Tue, Jun 25, 2019 at 10:33:11AM -0500, Derek Martin wrote: > On Tue, Jun 25, 2019 at 01:27:35PM +0200, Eike Rathke wrote: > > On Monday, 2019-06-24 18:41:56 -0500, Derek Martin wrote: > > > Or just remove it. If it's not accurate (or even if it is) what value > > > can it really provide? > > >

Re: meaning of number of lines in the message (%l in index_format)

2019-06-25 Thread Derek Martin
On Tue, Jun 25, 2019 at 01:27:35PM +0200, Eike Rathke wrote: > On Monday, 2019-06-24 18:41:56 -0500, Derek Martin wrote: > > Or just remove it. If it's not accurate (or even if it is) what value > > can it really provide? > > Even if it isn't accurate it gives me a rough idea about the size of th

Re: meaning of number of lines in the message (%l in index_format)

2019-06-25 Thread Eike Rathke
Hi, On Monday, 2019-06-24 18:41:56 -0500, Derek Martin wrote: > Or just remove it. If it's not accurate (or even if it is) what value > can it really provide? Even if it isn't accurate it gives me a rough idea about the size of the message (usually after viewed already which calculates the valu

Re: $TMPDIR (was Re: Security: Mutt and mailcap rules)

2019-06-25 Thread Steffen Nurpmeso
Derek Martin wrote in <20190624233654.gb13...@bladeshadow.org>: |On Tue, Jun 25, 2019 at 12:45:02AM +0200, Steffen Nurpmeso wrote: |> Hmm, while i totally support the $TMPDIR environment variable, and |> personally dislike it a lot if i set it and someone simply does |> not adhere to it, and if