Hi,
On Fri, Sep 26, 2014 at 07:30:29AM -0500, Drake Wilson wrote:
> [...]
> On my own desktop system, when I realized sh was bash recently I immediately
> relinked it to dash and intend to keep it that way as long as I reasonably
> can (I assume some things may break, in the current state; I'm willing to
> deal with that on my own for now).
Guys, please stop this witch hunt. If you don't trust bash, then get rid of it,
but don't forget that:
---
$ head -n1 /usr/bin/mkinitcpio
#!/bin/bash
---
So, yes ArchLinux core tools use and will continue to use 'bashisms' because
they are convenient. The bugs which started this discussion are not a big deal
anyway. They will only affect scripts that don't properly sanitize the input.
Such scripts have bigger problems to worry about IMHO. The SSH-related issue is
also insignificant because the bug will be triggered post-auth...
Cheers,
--
Leonid Isaev
GPG fingerprints: DA92 034D B4A8 EC51 7EA6 20DF 9291 EE8A 043C B8C4
C0DF 20D0 C075 C3F1 E1BE 775A A7AE F6CB 164B 5A6D
Attachment:
pgpRAdLqbTK9Q.pgp
Description: PGP signature
