Re: How to make Emacs more secure?

On 2026-05-03, at 07:29, Pierre Rouleau <[email protected]> wrote:

> Hi Marcin,
>
> On Sun, May 3, 2026 at 5:21 AM <[email protected]> wrote:
>
>  Hi all,
>
>  I started a job with quite strict security requirements, and I need to
>  reduce any risks, for example connected with possible injections of
>  malicious code.
>
>  Do you have any suggestions about how to deal with these risks?  Are
>  there any people in a similar situations who could share their (or their
>  companies') policies?  Any general opinions etc.?
>
> Would it not be possible to use security tools (IA based or otherwise) to scan 
> all the files stored in your ~/.emacs.d directory to ensure that the code you end
> up using is not affected by vulnerabilities?    
> And then lock it up somehow so no extra packages get installed.
> Would that not be better than depending on the reputation of repos you take these from?
>
> Just an idea

That's certainly an interesting idea.  "Locking" ~/.emacs.d is fairly
easy with Git (or just plain old checksums).  Thanks!

-- 
Marcin Borkowski
https://mbork.pl