From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <zsh-workers-return-34174-mason-zsh=primenet.com.au@zsh.org>
Received: (qmail 12320 invoked by alias); 9 Jan 2015 02:51:07 -0000
Mailing-List: contact zsh-workers-help@zsh.org; run by ezmlm
Precedence: bulk
X-No-Archive: yes
List-Id: Zsh Workers List <zsh-workers.zsh.org>
List-Post: <mailto:zsh-workers@zsh.org>
List-Help: <mailto:zsh-workers-help@zsh.org>
X-Seq: 34174
Received: (qmail 10495 invoked from network); 9 Jan 2015 02:51:04 -0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on f.primenet.com.au
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW autolearn=ham
	version=3.3.2
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        bh=QGDjdHta92tfEbB7dlmZNGC9XQ2G/nhIbM1WsYWyFno=;
        b=r1ESTdkAV6geFMXWJ0u3lRAJ3ygnRQs7YLlHguWf8UqBRh4eOus4QXvNmK4Rjy5Z3C
         YPLmSOOVG/aFQPh8IMhZ7no/L5CQygTCFwwg4zG58AskEqq5d3qa/j23c8cAVz6tz1ct
         zPmYZ0Qk4F8fT2fcoVjeqcVbR5vXygP54iSRwvlUxFIlvv4thwhRi2ZdTaLhWZsdsO7N
         k8r/7Jats2hhl3fkq8EbEd7BOFb+kPjmP5x8AK/29yqxgWsl1FKgc8eA5ZT9KatSrT1Q
         Dm0y6cjiib840fAWC5wY/joY1e2t1xUv3UrgPJUJRdd+iSujwY+0w9XNB9es6LX+2DL4
         roiA==
MIME-Version: 1.0
X-Received: by 10.107.5.7 with SMTP id 7mr12722503iof.1.1420771861544; Thu, 08
 Jan 2015 18:51:01 -0800 (PST)
In-Reply-To: <20150108142420.141e5f4b@pwslap01u.europe.root.pri>
References: <20141222203624.GA24855@tarsus.local2>
	<141227223029.ZM15959@torch.brasslantern.com>
	<141227234421.ZM16038@torch.brasslantern.com>
	<141228004101.ZM28486@torch.brasslantern.com>
	<20141229004957.GA1737@tarsus.local2>
	<141228200142.ZM22840@torch.brasslantern.com>
	<20150107220345.GE1714@tarsus.local2>
	<CAH+w=7Y3r3UeFPdHjPsS9arrWWjss2Bco1i0hNsn6fb8sfv7Xw@mail.gmail.com>
	<20150108064816.GA17816@lorien.comfychair.org>
	<150108000821.ZM7996@torch.brasslantern.com>
	<20150108142420.141e5f4b@pwslap01u.europe.root.pri>
Date: Fri, 9 Jan 2015 03:51:01 +0100
Message-ID: <CAHYJk3SLTxgDX5tsenkH-b2fRhTH8_OAL5KhEcKew48RwAhi1g@mail.gmail.com>
Subject: Re: [PATCH] Re: Insecure tempfile creation
From: Mikael Magnusson <mikachu@gmail.com>
To: Peter Stephenson <p.stephenson@samsung.com>
Cc: Zsh hackers list <zsh-workers@zsh.org>
Content-Type: text/plain; charset=UTF-8

On Thu, Jan 8, 2015 at 3:24 PM, Peter Stephenson
<p.stephenson@samsung.com> wrote:
> On Thu, 8 Jan 2015 00:08:21 -0800
> Bart Schaefer <schaefer@brasslantern.com> wrote:
>> Fortunately, we have the zsh/files module which provides a buitin "ln"
>> with well-defined semantics.  Hopefully that's good enough.
>
> It's a little bit tangential, but it's always bothered me that the only
> option we have for module builtins of this kind is to import the into
> the command namespace under the standard name, trashing the use of the
> system-standard utility your code may elsewhere depend on That is, you
> can use "command ln" if you need to, but the point is in the majority of
> existing code you would never have bothered to do that.
>
> We made special arrangements for (z)stat but that really doesn't scale
> well.
>
> Apart from (z)stat, most of the builtins that look like standard utilies
> are only there for special cases, e.g. for some reason you can't get to
> the file system where they live, in which case there's no real problem.
> But for uses like this there potentially is.

Actually all the builtins foo in zsh/files are also available as zf_foo.

-- 
Mikael Magnusson