Zsh Mailing List Archive
Messages sorted by:
Re: [PATCH] Re: Insecure tempfile creation
- X-seq: zsh-workers 34174
- From: Mikael Magnusson <mikachu@xxxxxxxxx>
- To: Peter Stephenson <p.stephenson@xxxxxxxxxxx>
- Subject: Re: [PATCH] Re: Insecure tempfile creation
- Date: Fri, 9 Jan 2015 03:51:01 +0100
- Cc: Zsh hackers list <zsh-workers@xxxxxxx>
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=QGDjdHta92tfEbB7dlmZNGC9XQ2G/nhIbM1WsYWyFno=; b=r1ESTdkAV6geFMXWJ0u3lRAJ3ygnRQs7YLlHguWf8UqBRh4eOus4QXvNmK4Rjy5Z3C YPLmSOOVG/aFQPh8IMhZ7no/L5CQygTCFwwg4zG58AskEqq5d3qa/j23c8cAVz6tz1ct zPmYZ0Qk4F8fT2fcoVjeqcVbR5vXygP54iSRwvlUxFIlvv4thwhRi2ZdTaLhWZsdsO7N k8r/7Jats2hhl3fkq8EbEd7BOFb+kPjmP5x8AK/29yqxgWsl1FKgc8eA5ZT9KatSrT1Q Dm0y6cjiib840fAWC5wY/joY1e2t1xUv3UrgPJUJRdd+iSujwY+0w9XNB9es6LX+2DL4 roiA==
- In-reply-to: <email@example.com>
- List-help: <mailto:firstname.lastname@example.org>
- List-id: Zsh Workers List <zsh-workers.zsh.org>
- List-post: <mailto:email@example.com>
- Mailing-list: contact zsh-workers-help@xxxxxxx; run by ezmlm
- References: <20141222203624.GA24855@tarsus.local2> <141227223029.ZM15959@torch.brasslantern.com> <141227234421.ZM16038@torch.brasslantern.com> <141228004101.ZM28486@torch.brasslantern.com> <20141229004957.GA1737@tarsus.local2> <141228200142.ZM22840@torch.brasslantern.com> <20150107220345.GE1714@tarsus.local2> <CAH+w=7Y3r3UeFPdHjPsS9arrWWjss2Bco1i0hNsn6fb8sfv7Xw@mail.gmail.com> <20150108064816.GA17816@lorien.comfychair.org> <150108000821.ZM7996@torch.brasslantern.com> <firstname.lastname@example.org>
On Thu, Jan 8, 2015 at 3:24 PM, Peter Stephenson
> On Thu, 8 Jan 2015 00:08:21 -0800
> Bart Schaefer <schaefer@xxxxxxxxxxxxxxxx> wrote:
>> Fortunately, we have the zsh/files module which provides a buitin "ln"
>> with well-defined semantics. Hopefully that's good enough.
> It's a little bit tangential, but it's always bothered me that the only
> option we have for module builtins of this kind is to import the into
> the command namespace under the standard name, trashing the use of the
> system-standard utility your code may elsewhere depend on That is, you
> can use "command ln" if you need to, but the point is in the majority of
> existing code you would never have bothered to do that.
> We made special arrangements for (z)stat but that really doesn't scale
> Apart from (z)stat, most of the builtins that look like standard utilies
> are only there for special cases, e.g. for some reason you can't get to
> the file system where they live, in which case there's no real problem.
> But for uses like this there potentially is.
Actually all the builtins foo in zsh/files are also available as zf_foo.
Messages sorted by: