Your message dated Sun, 14 Nov 2010 04:47:06 +0000
with message-id <[email protected]>
and subject line Bug#603438: fixed in posh 0.9
has caused the Debian Bug report #603438,
regarding posh: overrides $IFS from environment
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
603438: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=603438
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: posh
Version: 0.8.6
Severity: wishlist

POSIX sayeth:

        Implementations may ignore the value of IFS in the
        environment, or the absence of IFS from the
        environment, at the time the shell is invoked, in
        which case the shell shall set IFS to <space> <tab>
        <newline> when it is invoked.

Why two choices?  Inheriting IFS is the ancient and more intuitive
behavior.  The family tree looks like this, according to [1] (history
flows roughly left to right):


 v7 --- ... --- SVR4 --- ... --- S5.6 --- S5.7 --- ...
  | \               \
  |  \               Irix5
  GC  ...
         \
          4.2BSD --- 4.3BSD

version 7 shell, SVR4 shell, 4.2BSD sh, SunOS 5.6 sh:
        inherits IFS

Irix 5 sh:
        resets IFS if and only if running as root or setuid/gid

4.3BSD sh:
        resets IFS if and only if uid=0 or euid!=uid

SunOS 5.7 sh, Geoff Collyer's v7 shell port:
        resets IFS unconditionally

Almost all modern shells (including ash and ksh88) reset IFS at
startup unconditionally in order to make privileged scripts
harder to exploit.

Inheriting IFS would violate the assumptions of many scripts.
It would make it easier to catch bugs like
<http://bugs.debian.org/95447>.

On the other hand, it obviously seems worth considering requiring
IFS to be reset at startup for the usual portability and reliability
reasons.  That would probably be the better fix.

Thoughts welcome, as always.

[1] http://www.in-ulm.de/~mascheck/bourne/



--- End Message ---
--- Begin Message ---
Source: posh
Source-Version: 0.9

We believe that the bug you reported is fixed in the latest version of
posh, which is due to be installed in the Debian FTP archive:

posh_0.9.dsc
  to main/p/posh/posh_0.9.dsc
posh_0.9.tar.gz
  to main/p/posh/posh_0.9.tar.gz
posh_0.9_amd64.deb
  to main/p/posh/posh_0.9_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Clint Adams <[email protected]> (supplier of updated posh package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 13 Nov 2010 23:28:34 -0500
Source: posh
Binary: posh
Architecture: source amd64
Version: 0.9
Distribution: unstable
Urgency: low
Maintainer: Clint Adams <[email protected]>
Changed-By: Clint Adams <[email protected]>
Description: 
 posh       - Policy-compliant Ordinary SHell
Closes: 554217 586596 603438
Changes: 
 posh (0.9) unstable; urgency=low
 .
   * Inherit IFS from environment.  closes: #603438.
   * da.po: Danish translation from Joe Dalton.  closes: #586596.
   * Change debconf text to claim that the default /bin/sh is dash
     instead of bash.  closes: #554217.
Checksums-Sha1: 
 bf6cb0c88bb56cca16403bd08c596929d2855dd1 1472 posh_0.9.dsc
 a5d54e558f2f067848c47271ac31cadc9942c8d5 347189 posh_0.9.tar.gz
 b56fc69324c800729c96a339cd669177c158a0fe 94222 posh_0.9_amd64.deb
Checksums-Sha256: 
 02ddf959e87acc5132eb30af29d1e90bfac3da9bf612f2e837c64f5f004d2619 1472 
posh_0.9.dsc
 133d988ad3fbb95d69dfbb93f3467f69b43d0253c7f4ca432729075b3f0c8f01 347189 
posh_0.9.tar.gz
 9e3c647464a59fe18385d8e2d0ca8c13b5e7a51ded173ac2bd832e2732d5c02e 94222 
posh_0.9_amd64.deb
Files: 
 1181205d0a02ad75ad66914a911160cf 1472 shells optional posh_0.9.dsc
 23d5296fdf27ea6029bb84621a2a191a 347189 shells optional posh_0.9.tar.gz
 4642b8232076af1b6699626b3af5501e 94222 shells optional posh_0.9_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Debian!
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=g9Pw
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to