From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 23879 invoked by alias); 9 Jan 2015 09:02:46 -0000 Mailing-List: contact zsh-workers-help@zsh.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Id: Zsh Workers List List-Post: List-Help: X-Seq: 34176 Received: (qmail 6405 invoked from network); 9 Jan 2015 09:02:43 -0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on f.primenet.com.au X-Spam-Level: X-Spam-Status: No, score=-6.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_HI, SPF_HELO_PASS autolearn=ham version=3.3.2 X-AuditID: cbfec7f4-b7f126d000001e9a-92-54af992ff7e2 Date: Fri, 09 Jan 2015 09:02:38 +0000 From: Peter Stephenson To: Zsh hackers list Subject: Re: [PATCH] Re: Insecure tempfile creation Message-id: <20150109090238.164962b8@pwslap01u.europe.root.pri> In-reply-to: References: <20141222203624.GA24855@tarsus.local2> <141227223029.ZM15959@torch.brasslantern.com> <141227234421.ZM16038@torch.brasslantern.com> <141228004101.ZM28486@torch.brasslantern.com> <20141229004957.GA1737@tarsus.local2> <141228200142.ZM22840@torch.brasslantern.com> <20150107220345.GE1714@tarsus.local2> <20150108064816.GA17816@lorien.comfychair.org> <150108000821.ZM7996@torch.brasslantern.com> <20150108142420.141e5f4b@pwslap01u.europe.root.pri> Organization: Samsung Cambridge Solution Centre X-Mailer: Claws Mail 3.7.9 (GTK+ 2.22.0; i386-redhat-linux-gnu) MIME-version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupjluLIzCtJLcpLzFFi42I5/e/4FV39metDDCZMFLM42PyQyYHRY9XB D0wBjFFcNimpOZllqUX6dglcGf8X9jEVrOes2Lz6GXsD41b2LkZODgkBE4k1f6+wQdhiEhfu rQeyuTiEBJYySqw89JoZwlnOJPGy4SwTSBWLgKpEw7ZdYB1sAoYSUzfNZgSxRQS0JHacPAlW IyxgLNHxejMriM0rYC/RcGQnWA2nQLDEhTcLoTY8Y5G4OGcOWIJfQF/i6t9PTBBn2EvMvHKG EaJZUOLH5HssIDYz0ILN25pYIWx5ic1r3jJPYBSYhaRsFpKyWUjKFjAyr2IUTS1NLihOSs81 1CtOzC0uzUvXS87P3cQICcMvOxgXH7M6xCjAwajEw7tDdX2IEGtiWXFl7iFGCQ5mJRHeQxOA QrwpiZVVqUX58UWlOanFhxiZODilGhgVl6/rE8qpk3c/vNLyfbZBOpPa4/kH05hSa3Z1rSs4 9/VxpJBA56cN+St2rPiWb3jPReTJhOztmn37PxeY3TEuTwrf6HJI7Oy9jLvLVv/Vfvxo7f+V 7+4WFxmvquAs/sr37ma7Y2jWjj+165wf9b1u9Z0uvdvrxIEnTUmScrqOimzLRCojJqQrsRRn JBpqMRcVJwIACu3khiECAAA= On Fri, 9 Jan 2015 03:51:01 +0100 Mikael Magnusson wrote: > On Thu, Jan 8, 2015 at 3:24 PM, Peter Stephenson > wrote: > > It's a little bit tangential, but it's always bothered me that the only > > option we have for module builtins of this kind is to import the into > > the command namespace under the standard name, trashing the use of the > > system-standard utility your code may elsewhere depend on That is, you > > can use "command ln" if you need to, but the point is in the majority of > > existing code you would never have bothered to do that. > > > > We made special arrangements for (z)stat but that really doesn't scale > > well. > > > > Apart from (z)stat, most of the builtins that look like standard utilies > > are only there for special cases, e.g. for some reason you can't get to > > the file system where they live, in which case there's no real problem. > > But for uses like this there potentially is. > > Actually all the builtins foo in zsh/files are also available as zf_foo. You're right, that's another, different, special case. But it's the one that probably matters the most in practice. pws