[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH] bash: add socket server support
From: |
Mike Frysinger |
Subject: |
Re: [PATCH] bash: add socket server support |
Date: |
Wed, 27 Nov 2013 02:35:25 -0500 |
User-agent: |
KMail/1.13.7 (Linux/3.12.1; KDE/4.6.5; x86_64; ; ) |
On Wednesday 13 November 2013 06:39:45 Irek Szczesniak wrote:
> On Wed, Nov 13, 2013 at 7:35 AM, Piotr Grzybowski wrote:
> > Hi Everyone, hi Joel,
> >
> > the idea is nice, and I can really see that it is useful, but I would
> >
> > be extremely careful with introducing those kind of changes, it can be
> > easily interpreted as "backdoor feature", that is: from security point
> > of view it could be a disaster.
>
> ':' in *any* Unix paths is not wise because its already used by $PATH.
i don't think that matters here. we aren't talking about any path that is
searched via $PATH, we're talking about a bash-internal pseudo path that is
checked explicitly. there is no such /dev/tcp/ path on *nix systems; bash
keys off that to do internal network parsing.
-mike
signature.asc
Description: This is a digitally signed message part.