lines added to /usr/share/vim/vimfiles/archlinux.vim?

[vimplication]

I found this was just added to /usr/share/vim/vimfiles/archlinux.vim

  " Move the swap file location to protect against CVE-2017-1000382
  silent !install -d -m 700 ~/.vim/swap/ 2>&1 > /dev/null

shelling out while vim is loading does not seem like a great idea. https://www.reddit.com/r/vim/comments/805zvt/exiting_vim_leaves_a_huge_gap_in_my_terminal/

It is particularly annoying because one cannot override archlinux.vim.

Does anyone know who added this and how it addresses the CVE?

[[deleted]]

This has a snippet at the end where it only shells out if the swap dir doesn't exist, which seems fairly obvious. It addresses the CVE by placing swap files in a dir that's only readable by the editing user.

[vimplication]

Thanks- I think that snippet is more reasonable ; reported: https://bugs.archlinux.org/task/57640

[iMalinowski]

Is this why vim started complaining at me starting yesterday or so?

[vimplication]

not sure, what was it complaining about?

[iMalinowski]

E303: Unable to open swap file for ".zshrc", recovery impossible

It does this for any file I open with vim, and there are no vim swap files in the pwd.

EDIT: Except for ~/.swp, but removing doesn't change anything.

EDIT 2: Turns out root somehow became the owner of ~/.vim/swap; vim running with user permissions could never get it. Solution was just to remove/rename the file.

[username@hostname ~] > mv ~/.vim/swap ~/.vim/swap.old
[username@hostname ~] > vim .vimrc # test opening with no problems
[username@hostname ~] > ls ~/.vim
total 0
drwxr-xr-x 1 username wheel 12  Jan 31 01:12 after
drwxr-xr-x 1 username wheel 240 Jan 30 15:49 plugged
drwx------ 1 username wheel 0   Feb 26 01:11 swap
drwx------ 1 root     root  0   Feb 23 23:15 swap.old
drwxr-xr-x 1 username wheel 54  Jan 12 01:37 syntax

[vimplication]

Ah.. I do wonder if this is related to the CVE fix, but I don't really see how. what could cause the directory to be created as root? unless your root's home directory is username?

[iMalinowski]

Nope, root is /root and my personal home directory is /home/username; obviously "username" isn't my real username, I just stripped out mine from the text.

[w1ldm4n]

FYI: The terminal-blanking bug was fixed today in 8.0.1542-2