From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED,T_SCC_BODY_TEXT_LINE, UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 18239 invoked from network); 30 Aug 2022 01:42:53 -0000 Received: from zero.zsh.org (2a02:898:31:0:48:4558:7a:7368) by inbox.vuxu.org with ESMTPUTF8; 30 Aug 2022 01:42:53 -0000 ARC-Seal: i=1; cv=none; a=rsa-sha256; d=zsh.org; s=rsa-20210803; t=1661823773; b=Xa5KbSj62R7yipB7IpQ40k84reFu9eZBpq7iDlU+ANkAOmQfBniMvt8bjhe1zJmpEKfMXH0MaY 2NN/CpMBbmO3U881J8ffANK3CFMN+OpJyNlUelT1i54Nt3j6GXM+a6Lxdn4ffKHZhfFXgaIxsM YJdajD884uSKufEWG3UK/ucd8YyuqBVTvsnkDY6J8aET6V0r4MikfO227oZhh8LRV2InLZ/EmD IO8eWmuAFYY2fjbbjn6knqMqzYddbZKRDzzQtGpNQGuymKT+SgPCAbwRotU9a6SElaOn1SDYsf ICtrS5jIaPoySXYCTrrFz7phwO2z5OzTN7xPhWyiaJlEog==; ARC-Authentication-Results: i=1; zsh.org; iprev=pass (mail-ej1-f41.google.com) smtp.remote-ip=209.85.218.41; dkim=pass header.d=brasslantern-com.20210112.gappssmtp.com header.s=20210112 header.a=rsa-sha256; dmarc=none header.from=brasslantern.com; arc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed; d=zsh.org; s=rsa-20210803; t=1661823773; bh=N9kh513OtB+WnwAqPdgk5E9hmH5aomEoU9DzqaoGwVo=; h=List-Archive:List-Owner:List-Post:List-Unsubscribe:List-Subscribe:List-Help: List-Id:Sender:Content-Transfer-Encoding:Content-Type:Cc:To:Subject: Message-ID:Date:From:In-Reply-To:References:MIME-Version:DKIM-Signature: DKIM-Signature; b=mzAGHnYhd4J9vKAGN3D553Q95+pO+xr8lcT/xF8ZXauGO4QpYs+1EsU1ml0turkEKge4RZicuN 41cVB5Bm988Fuc2y6cr21WbqjDPI4HGX4jhN3bCpStlT1fBQmoq8O1xz8PbcktHs439/vvMHNW rzB3M/4wFg/oRSujTNbvOU+PyilmV5UN7fBCAJfdF41/tWF8TyYeRo6kQ0/9LDMK7cCDveHHj7 GSrx5vm+2ZXXowydTq/HUFZmefDYJjnLt7cPrxXxc9K9ZarobV2OAxJDFVpsrYdFSahscm0eKs t1RSIbw6pZIhUwHgrG/AhfOlErUAIy+BLsW7DLGURZHQ1Q==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=zsh.org; s=rsa-20210803; h=List-Archive:List-Owner:List-Post:List-Unsubscribe: List-Subscribe:List-Help:List-Id:Sender:Content-Transfer-Encoding: Content-Type:Cc:To:Subject:Message-ID:Date:From:In-Reply-To:References: MIME-Version:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID; bh=HjjzFNovNIL3rjLhtiKU5Jl8Oh6L6SMOE85+fs2A1JU=; b=RDYQ8apvLjLpUGvZn3frKn+6El weW+JQqeb3YQPez1gafo31muB+jyfR4sOgcTVK4cU/PsdHcn6HIFgKzyNZYDq+ejI1wDNPA6uf9hs vFk2Cezh2p18HJuZXMlmD/e7b1eGLNAmcy66BPZfYK5zaSdbqRaaAW6Hv241exQr7B3DGkd9MpA+o lHbAMD7cYUysGjX5jgfc7tfeRfoAoPDzcQR6idZ3nznnnLqNhnZGCoAbyoBdPsMqRFgrcrq/1Ot1G Vi9D1RpibeisD7mb4aksJYMUbgS37rdiaPFKfWPKhn2sTIvc0TPt57lkN6Fb8DIEUQwNrZl03Itwi 2Nepsj3g==; Received: from authenticated user by zero.zsh.org with local id 1oSqHE-000NSe-Lx; Tue, 30 Aug 2022 01:42:52 +0000 Authentication-Results: zsh.org; iprev=pass (mail-ej1-f41.google.com) smtp.remote-ip=209.85.218.41; dkim=pass header.d=brasslantern-com.20210112.gappssmtp.com header.s=20210112 header.a=rsa-sha256; dmarc=none header.from=brasslantern.com; arc=none Received: from mail-ej1-f41.google.com ([209.85.218.41]:33324) by zero.zsh.org with esmtps (TLS1.3:TLS_AES_128_GCM_SHA256:128) id 1oSqGE-000MSM-D5; Tue, 30 Aug 2022 01:41:50 +0000 Received: by mail-ej1-f41.google.com with SMTP id cu2so19293352ejb.0 for ; Mon, 29 Aug 2022 18:41:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=brasslantern-com.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date; bh=HjjzFNovNIL3rjLhtiKU5Jl8Oh6L6SMOE85+fs2A1JU=; b=48EmASjAElsY33tu9+LOSUfYDHdYvUHxUYgzvWUVG4v8kCBsJ182CAkmUnpZGZpU8v E+dJlMzMYtnPUI6j7fIxQil6sZ3fKisGoOInkFaOg0PlGKV0HTog+qmrO6Q+XH0UEctz CdqEUdBlF3bKEDJb/vJnY7Wk8tJsptV8IMt755aSw81U+g4YkH9+x3W9B0U/fXWqWG7D P49WvSyrVYRxTPOEgtF8V7C/1J5ukWX2tE94NwLuq/uyY6knkKlJD1gzMmdARGA7b22r jiOsne6ejMmHLvjfAz+DK38SffMv70+FHkScr29FlkOJlBiMU9lLtTNqRypgGJaO9ctb zgRg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date; bh=HjjzFNovNIL3rjLhtiKU5Jl8Oh6L6SMOE85+fs2A1JU=; b=pgsN+XHy8jqQIje0amBkoUbUgPKrIXoVHgXmsAi2cmvsBlzcEzPQcIOZrwo5gPvDO9 eBWbiPB+A3YeZYZq/ocOaiT8zWke5r04amkfh6u1J5idSQO5ltNFxZoO54TdfdcJW4gu c8DiRLs7THu1Xu1Rm2sMc1PkHhbFWfW50gvr7yNca8caXcdVOxen1H7SL5yc4KD2gkeF 3V7Ak9H6BCjatMdEYz38imN7yc3qfR7HuORuuf+khzD8on6zSMtGiGULW4jEJiqSKLfT fxRBLlqF35fG98R8n1KbpdLuo6pT69dkHHslcL/yhyJey5niiGBSoWj30Z93/9uBclCL qNMw== X-Gm-Message-State: ACgBeo0lXWqMbIUpjhu5WT00iFYnJCp22fKJXqo1hAP7tRukvJp5g1eA Ti9xh1Fc2XPkgSAhNMqggg5/zWTuMvgPDh+ugtEJuHKBm8JwOQ== X-Google-Smtp-Source: AA6agR5yRfH7WmDsRynHBFfxL2Gx0zIYddD2oEthW5EXn6xE0CP0KUs4JCYSs74QTIobAxV9E+umvE9Wb3vP0ozfNxk= X-Received: by 2002:a17:906:fe09:b0:73d:90ae:f801 with SMTP id wy9-20020a170906fe0900b0073d90aef801mr14313585ejb.699.1661823710049; Mon, 29 Aug 2022 18:41:50 -0700 (PDT) MIME-Version: 1.0 References: <64b57144-d4af-4708-983b-0bd202557bbd@www.fastmail.com> <4369c556-7ccb-4866-8e69-9d829afc81c3@www.fastmail.com> In-Reply-To: From: Bart Schaefer Date: Mon, 29 Aug 2022 18:41:38 -0700 Message-ID: Subject: Re: Overriding "builtin" To: Zach Riggle Cc: zsh-users@zsh.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Seq: 28009 Archived-At: X-Loop: zsh-users@zsh.org Errors-To: zsh-users-owner@zsh.org Precedence: list Precedence: bulk Sender: zsh-users-request@zsh.org X-no-archive: yes List-Id: List-Help: List-Subscribe: List-Unsubscribe: List-Post: List-Owner: List-Archive: On Mon, Aug 29, 2022 at 1:42 PM Zach Riggle wrote: > > Since the environment is malicious, $PATH also cannot be trusted -- I tho= ught "=3D" might be a way to guarantee that an executable at a specific abs= olute path does get executed instead of something else (alias, function, au= toloadable, etc) but it doesn't work when specifying the full path. You can always use relative paths. E.g. /../././../usr/bin/sudo /usr/./bin/./sudo etc. it would be ... impractical ... to replace all possible combinations of this with functions.