bug-bash
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: cd with multiple arguments?


From: Marc Herbert
Subject: Re: cd with multiple arguments?
Date: Thu, 16 Dec 2010 09:12:35 +0000
User-agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101209 Fedora/3.1.7-0.35.b3pre.fc14 Thunderbird/3.1.7

Le 16/12/2010 01:45, Bob Proulx a écrit :
> The shell isn't the only one that introduces a security vulnerability
> on most systems when setuid.  All interpreters are the same in that
> regard.  On systems where you shouldn't suid scripts then you
> shouldn't suid any of the set of sh/perl/python/ruby scripts either.
> I think most people would consider at least one of those in that set a
> real programming language. :-)

None of these other languages has the same quoting complexity. You can
find some FAQs saying: "Never setuid a shell script, use something
less dangerous instead like Perl for instance".

I imagine it is too difficult to appreciate this complexity and
objectively compare it to other languages when you are an expert in
it.





reply via email to

[Prev in Thread] Current Thread [Next in Thread]