Paul Eggert <[email protected]> writes:
> On 2026-09-05 11:31, Collin Funk wrote:
>> These issues are all in files from the sample subdirectory, which aren't
>> installed anyways.
>
> Thanks for the review. Probably the simplest fix is to remove the
> sample subdirectory, though we're close to a release and this can wait
> until after that.
Makes sense to me.
> Perhaps we should also stop installing the scripts we do install.
> Nowadays who uses gzexe, uncompress, zcmp, zdiff, zegrep, zfgrep,
> zforce, zgrep, zless, zmore, znew? Nowadays they're mainly
> security-bug magnets. Perhaps we should start by making the
> installation of these optional. (Though not before the next release.)
They should probably be considered individually. gzexe seems obvious to
remove, at least to me. It can't be used on any of the programs it
executes, e.g., on 'sed'. It also is the most security sensitive, since
it writes a file and then executes it.
Anecdotally, I use 'zgrep' quite a lot at work. Typically I am looking
at lots of log files which have been compressed and rotated via
logrotate rules [1]. Sometimes I just need to look for something in a
specific file in which case 'zgrep' suffices. In other times logs get a
bit too big to do something like this comfortably:
$ find . -name '*.gz' -print0 | parallel -0 gunzip
Collin
[1] https://linux.die.net/man/8/logrotate
