From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE,T_DKIMWL_WL_HIGH autolearn=ham autolearn_force=no version=3.4.2 Received: from primenet.com.au (ns1.primenet.com.au [203.24.36.2]) by inbox.vuxu.org (OpenSMTPD) with ESMTP id a0d644f1 for ; Mon, 3 Jun 2019 09:36:00 +0000 (UTC) Received: (qmail 15641 invoked by alias); 3 Jun 2019 09:35:46 -0000 Mailing-List: contact zsh-workers-help@zsh.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Id: Zsh Workers List List-Post: List-Help: List-Unsubscribe: X-Seq: 44390 Received: (qmail 13985 invoked by uid 1010); 3 Jun 2019 09:35:46 -0000 X-Qmail-Scanner-Diagnostics: from mailout1.w1.samsung.com by f.primenet.com.au (envelope-from , uid 7791) with qmail-scanner-2.11 (clamdscan: 0.101.2/25468. spamassassin: 3.4.2. Clear:RC:0(210.118.77.11):SA:0(-7.0/5.0):. Processed in 3.564349 secs); 03 Jun 2019 09:35:46 -0000 X-Envelope-From: p.stephenson@samsung.com X-Qmail-Scanner-Mime-Attachments: | X-Qmail-Scanner-Zip-Files: | Received-SPF: pass (ns1.primenet.com.au: SPF record at _spf.samsung.com designates 210.118.77.11 as permitted sender) DKIM-Filter: OpenDKIM Filter v2.11.0 mailout1.w1.samsung.com 20190603093506euoutp017254a16626b995796d071d9e91be2782~kpo_kfnr62141721417euoutp01g DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=samsung.com; s=mail20170921; t=1559554506; bh=jH4z2ORBj+ZpnVvSOazb+OWe7JsvRaEE3gB0TgOfXBQ=; h=Subject:From:To:Date:In-Reply-To:References:From; b=q118dWH+W2+FvRQwDyhPR+bsLRnKB8wRdUuC2P31QGlsSrrmjJjmLePDpFBZt8PPO 1GNtItHzRK5brIw0YL02/Gr/2bsivcpNe4h2aEAa2/Fo4z9kG3jd4c1xZqqBngNxnP Pulhfw6coLwjQyDlqZI2GShJyp0uqfCX8Vx6ba1Q= X-AuditID: cbfec7f2-f2dff700000010ca-a8-5cf4e9c989c3 Message-ID: <1559554504.4876.4.camel@samsung.com> Subject: Re: [PATCH] [doc] [repost] warnings about restricted shell (Was: Zsh - Multiple DoS Vulnerabilities) From: Peter Stephenson To: Date: Mon, 3 Jun 2019 10:35:04 +0100 In-Reply-To: <20190531120513.4q7xzkw3xjxkaxnh@chaz.gmail.com> X-Mailer: Evolution 3.18.5.2-0ubuntu3.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrPIsWRmVeSWpSXmKPExsWy7djPc7onX36JMZj/zsriYPNDJgdGj1UH PzAFMEZx2aSk5mSWpRbp2yVwZay7/pa94A5bxalvz5gaGNexdjFycEgImEj8u27QxcjFISSw glGisesFO4TTxyRxfM0lRginl0mioW0LUxcjJ1jHlf6lbBCJ5YwSt/beZ4KrWvF8DpRzmlFi 6bW7UMPOM0qcPLSFFaSfV8BQ4vidy+wgtrBAvsTVaTvB4mxA8ambZjOC2CICkhLXmk+D2SwC KhIT3lwHszkFbCUubrvLDnGHhsSGm8eYIGYKSpyc+YQFxGYWkJdo3jqbGWSxhMB9Non9K74y QjS4SJw9+o0VwhaWeHV8C9QgGYn/O+czQTS0M0qsmfSaHcLpYZTYdPQOVLe1RN/ti4ygQGMW 0JRYv0sfIuwo8X39AiZIWPJJ3HgrCHEEn8SkbdOZIcK8Eh1tQhDVahI7mrYyQoRlJJ6uUZjA qDQLyQezkHwwC2HVAkbmVYziqaXFuempxYZ5qeV6xYm5xaV56XrJ+bmbGIHJ4PS/4592MH69 lHSIUYCDUYmHdwb7lxgh1sSy4srcQ4wSHMxKIryJt4FCvCmJlVWpRfnxRaU5qcWHGKU5WJTE easZHkQLCaQnlqRmp6YWpBbBZJk4OKUaGDfdV3B7LnLE8tf16YfslseqXV8TN104b96in6c8 V3csrrR7Kivuduhp6LmaPVHt8x4JdPeyr17Pz32xPsVqYsYXC63sJ6LbZU+/OxDVZeYcqfa5 TGf5qYlua2d8Ftl+/ZTC3+snH6dPnT3516SZOTlnS+feO/dc4duSCPH5OqsXxgX0V52ReP1S iaU4I9FQi7moOBEAoxkmLAIDAAA= X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpmkeLIzCtJLcpLzFFi42I5/e/4Pd0TL7/EGDx9ZmVxsPkhkwOjx6qD H5gCGKP0bIryS0tSFTLyi0tslaINLYz0DC0t9IxMLPUMjc1jrYxMlfTtbFJSczLLUov07RL0 MtZdf8tecIet4tS3Z0wNjOtYuxg5OSQETCSu9C9l62Lk4hASWMoosbxjExNEQkbi05WP7BC2 sMSfa11QRd1MEncPX2SGcE4zSnRc2g3lnGeUOP9mO1gLr4ChxPE7l8FsYYF8iavTdoLtYwOK T900mxHEFhGQlLjWfBrMZhFQkZjw5jqYzSlgK3Fx2112iKFXmSRePL8KNohZQFOidftvqJs0 JDbcPMYEsUxQ4uTMJywQNfISzVtnM09gFJqFpGUWkrJZSMoWMDKvYhRJLS3OTc8tNtQrTswt Ls1L10vOz93ECIyAbcd+bt7BeGlj8CFGAQ5GJR7eD5xfYoRYE8uKK3MPMUpwMCuJ8CbeBgrx piRWVqUW5ccXleakFh9iNAX6aCKzlGhyPjA680riDU0NzS0sDc2NzY3NLJTEeTsEDsYICaQn lqRmp6YWpBbB9DFxcEo1MPrs3+J6+W1U2G3ZU9tf3F4fWi3T/YF1mdxd0x1Zl6LaOmbW1Qbf PPGg76XhgexzUccFV674uODLv8A9Fev3P77/b0oeV0ne+8iThx4u3sDt57pkZ8u915Jv3J/+ vKOcKrdi0YuMygvXfGYGy71QfpeuHMcaXqqWufPW85REvWyZidnVxu7/9WSVWIozEg21mIuK EwEAWPuTlgIAAA== X-CMS-MailID: 20190603093505eucas1p21dc8944fa50be9d2e827849cbb54d1ca X-Msg-Generator: CA Content-Type: text/plain; charset="utf-8" X-RootMTR: 20190531120621epcas1p14877059b07110a46ad243289642c3bd3 X-EPHeader: CA CMS-TYPE: 201P X-CMS-RootMailID: 20190531120621epcas1p14877059b07110a46ad243289642c3bd3 References: <20190512162149.3fsqupqftmwxrbvd@chaz.gmail.com> <20190531120513.4q7xzkw3xjxkaxnh@chaz.gmail.com> On Fri, 2019-05-31 at 13:05 +0100, Stephane Chazelas wrote: > 2019-05-12 17:21:49 +0100, Stephane Chazelas: > [...] > >  > > At least, we should give more warning about it and recommend > > alternatives. Here's an attempt below: > I'm bringing this up again as it looks like it has stayed mostly > unnoticed (except maybe by Chet ;-)) >  > IMO, the restricted mode should be deprecated. In any case, we > should at least warn against using it. Below was my attempt > which could definitely be improved, I hope it can serve as a > basic for discussio. It does seems reasonable to have something like this, but I'm not sure I'm feeling like I can do any particularly useful editing myself.  If nobody has any immediate comments we can simply put the whole thing in, where it obviously remains available for any follow up changes. pws