Jira (PUP-3142) exec type should allow passing of arguments as an array rather than a string

[Andy Parker (JIRA)]

Title: Message Title

Andy Parker updated an issue   Puppet / PUP-3142 exec type should allow passing of arguments as an array rather than a string Change By: Andy Parker The exec type takes commands and arguments as a string, (@"echo foo"@) which will then get passed to /bin/sh (@sh -c "echo foo"@) by Kernel#system. This can make things pretty awkward if the command you're trying to execute contains shell metacharacters or quotes of its own, and under appropriately pathological conditions could even be a security problem...  (username '"&&rm -rf /' or something?  *shrug*) It'd be grand if the exec type would support passing things around as arrays.  eg: <pre> {code} exec {"example":   command => "/bin/echo",   arguments => ["*", "yay", "*"], } </pre> {code} (Passing an array to  {{  Kernel#system }}  bypasses the shell completely: http://www.ruby-doc.org/core/classes/Kernel.html#M005982) -sq Add Comment   This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.