summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRyan Phillips <rphillips@gentoo.org>2003-01-21 18:07:15 +0000
committerRyan Phillips <rphillips@gentoo.org>2003-01-21 18:07:15 +0000
commit6712c42d457dad06f0ea06e23a874b9c0a908fd6 (patch)
treea04ced2a5a3bb43201638da9b15dfd1b287d7ba8 /app-editors/vim
parentPatches 1-300 (diff)
downloadgentoo-2-6712c42d457dad06f0ea06e23a874b9c0a908fd6.tar.gz
gentoo-2-6712c42d457dad06f0ea06e23a874b9c0a908fd6.tar.bz2
gentoo-2-6712c42d457dad06f0ea06e23a874b9c0a908fd6.zip
Disable modelines by default. Fixes security bug #14088
Diffstat (limited to 'app-editors/vim')
-rw-r--r--app-editors/vim/ChangeLog5
-rw-r--r--app-editors/vim/files/vimrc4
2 files changed, 8 insertions, 1 deletions
diff --git a/app-editors/vim/ChangeLog b/app-editors/vim/ChangeLog
index 8a92b43f415b..7f445cad67af 100644
--- a/app-editors/vim/ChangeLog
+++ b/app-editors/vim/ChangeLog
@@ -1,9 +1,12 @@
# ChangeLog for app-editors/vim
# Copyright 2002 Gentoo Technologies, Inc.; Distributed under the GPL
-# $Header: /var/cvsroot/gentoo-x86/app-editors/vim/ChangeLog,v 1.39 2003/01/21 17:50:39 rphillips Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-editors/vim/ChangeLog,v 1.40 2003/01/21 18:03:10 rphillips Exp $
*vim-6.1-r19.ebuild (21 Jan 2003)
+ 21 Jan 2003; Ryan Phillips <rphillips@gentoo.org> files/vimrc :
+ Added modelines=0 to default to high security. Fixes #14088
+
21 Jan 2003; Ryan Phillips <rphillips@gentoo.org> vim-6.1-r19.ebuild :
patches 1-300
diff --git a/app-editors/vim/files/vimrc b/app-editors/vim/files/vimrc
index 05286f169887..7596f42d8f8e 100644
--- a/app-editors/vim/files/vimrc
+++ b/app-editors/vim/files/vimrc
@@ -9,6 +9,10 @@ set backspace=2 " allow backspacing over everything in insert mode
set autoindent " always set autoindenting on
set ruler " show the cursor position all the time
+" added to default to high security within Gentoo. Fixes #14088
+" -rphillips
+set modelines=0
+
" Vim beeps in gnome-terminals when trying to fetch the terminal version.
" This is really a bug in gnome-terminal (I think), but we can workaround it
" with the following code.