Re: GNU Sharutils and security

[Paul Jarc]

Bruce Korb <address@hidden> wrote:
>   #!/bin/echo please_unpack_with_GNU_unshar ; \
>   exit 1
>
> This will cause normal shells to echo something and die, tho bash-as-Bourne
> doesn't follow the standard:

The shell isn't involved.  This is up to the kernel and echo.

> weird.  My understanding that it was to take one and only one argument.

To be portable, you have to stick to just one argument.  Solaris
splits the line up at spaces, and passes only the first argument.
Linux passes the whole line as a single argument.  Regardless, all
kernels pass the name of the script as an extra argument, hence the
final "./:x".


paul