From mboxrd@z Thu Jan 1 00:00:00 1970 From: Paul Stewart Subject: Re: RFC: Illegal Characters in File Names Date: Tue, 20 Jul 2004 15:11:18 PDT Sender: linux-fsdevel-owner@vger.kernel.org Message-ID: <1090361478l.2419l.0l@orlando> References: <200407202149.i6KLn7318302@watkins-home.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; DelSp=Yes Format=Flowed Content-Transfer-Encoding: 7BIT Cc: 'Jan Hudec' , 'Matthew Wilcox' , viro@parcelfarce.linux.theplanet.co.uk, 'Bryan Henderson' , linux-fsdevel@vger.kernel.org, "'Joseph D. Wagner'" Return-path: Received: from alpha.Xerox.COM ([13.1.64.93]:31319 "HELO alpha.xerox.com") by vger.kernel.org with SMTP id S266324AbUGTWL3 convert rfc822-to-8bit (ORCPT ); Tue, 20 Jul 2004 18:11:29 -0400 To: Guy In-Reply-To: <200407202149.i6KLn7318302@watkins-home.com> (from bugzilla@watkins-home.com on Tue, Jul 20, 2004 at 14:49:07 -0700) Content-Disposition: inline List-Id: linux-fsdevel.vger.kernel.org On 2004.07.20 14:49, Guy wrote: > What about: > ls|more Hm.. I've tried this under rxvt, xterm and gnome-terminal and none of these respond to the "ls | cat", "ls" or "ls | more" scenarios in any unexpected way. I think we're straying from the point. If the argument is "the filesystem should change because some terminal applications might be coerced into responding in vulnerable ways", the answer is that the terminal application should be changed. This is not just about philosophical purity or laziness about who should "protect the user". There are various vectors for getting at the output to the terminal. "ls | cat" is only one of them. I could imagine mail content, and even file content being vulnerable. If you saw a file in /tmp/ named "README_GUY", wouldn't you be the least bit tempted to have a look at what was inside? If we're going to follow this branch of the argument, we've got to correctly determine the threat to terminals and consider changes to the terminal to truly have a story about preventing them. Alas, this discussion is out of scope for fs-devel. -- Paul