From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Guy" Subject: RE: RFC: Illegal Characters in File Names Date: Wed, 21 Jul 2004 11:25:03 -0400 Sender: linux-fsdevel-owner@vger.kernel.org Message-ID: <200407211525.i6LFP3322002@watkins-home.com> References: <20040721122150.GO4690@lug-owl.de> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: QUOTED-PRINTABLE Cc: , "'Bryan Henderson'" , "'Jan Hudec'" , , "'Joseph D. Wagner'" Return-path: Received: from sccrmhc13.comcast.net ([204.127.202.64]:61585 "EHLO sccrmhc13.comcast.net") by vger.kernel.org with ESMTP id S266505AbUGUPZG convert rfc822-to-8bit (ORCPT ); Wed, 21 Jul 2004 11:25:06 -0400 To: "'Jan-Benedict Glaw'" In-Reply-To: <20040721122150.GO4690@lug-owl.de> List-Id: linux-fsdevel.vger.kernel.org ?-----Original Message----- ?From: Jan-Benedict Glaw [mailto:jbglaw@lug-owl.de]=20 ?Sent: Wednesday, July 21, 2004 8:22 AM ?To: Guy ?Cc: viro@parcelfarce.linux.theplanet.co.uk; 'Bryan Henderson'; 'Jan Hu= dec'; ?linux-fsdevel@vger.kernel.org; 'Joseph D. Wagner' ?Subject: Re: RFC: Illegal Characters in File Names ?On Tue, 2004-07-20 16:44:08 -0400, Guy ?wrote in message <200407202044.i6KKi8318014@watkins-home.com>: ?> I think you are confused! ?>=20 ?> I am not talking about lusers creating applications! Just empty fil= es ?with ?> very controlled filenames. The file names would contain the control ?> characters to affect the terminal when anyone (including root) issue= d the ?> "ll" command in /tmp. ?Then, the local system's configuration is just missing a "-b" for ls. ?...or you're using a broken terminal. In no way should ls be called wi= th ?"-N", except you ask for trouble... Maybe -b should be the default for ls. Since ls|more does the same thi= ng. ?> Have you ever run cat on a binary file and got trash on the screen, = then ?a ?> few "command not found" errors? This is similar to what I am saying= =2E ?But ?> in my case the command would be found! ?Why should I be dumb enough to shoot my foot? Specifically "root" ?shouldn't do such nonsense:) Goober! I was giving an example! If cat file can cause a scr= ipt to run, then "ls|more" could also, if the filename had the same binary = data. You can't shoot your foot, it's in your mouth! ?> I don't know the VT100 commands, so I can't create an example. Mayb= e if ?I ?console_codes(4) may be a start. ?> You said: ?> " What security risk? You mean running applications written by luse= rs? ?> That's a serious one, of course, but how would anything short of rm(= 1) ?> and forced (re)education of idiots who wrote the crap in question he= lp ?> it?" ?>=20 ?> I said: ?> You lost me! If someone creates a script or program and puts it in = /tmp ?> anyone could run it, even root. The script could do anything. ?How should "someone" make _me_ run his program? One day when you do "ls|more" in a directory that they have created 2 o= r more scripts. You seem to have a hard time understanding this concept. ?MfG, JBG ?--=20 ? Jan-Benedict Glaw jbglaw@lug-owl.de . +49-172-7608481 ? "Eine Freie Meinung in einem Freien Kopf | Gegen Zensur | Gegen ?Krieg ? fuer einen Freien Staat voll Freier B=FCrger" | im Internet! | i= m Irak! ? ret =3D do_actions((curr | FREE_SPEECH) & ~(NEW_COPYRIGHT_LAW | DRM= | ?TCPA)); - To unsubscribe from this list: send the line "unsubscribe linux-fsdevel= " in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html