Re: OT using absolute paths in scripts

2013-01-14 Thread Jeremie Le Hen
Hi Marc, On Sun, Jan 13, 2013 at 07:12:23PM +0100, Marc Espie wrote: On Sun, Jan 13, 2013 at 11:04:08AM -0600, Maximo Pech wrote: They mandate that on all shell scripts we have to use absolute paths for every single command. That does provide ways less security than setting the PATH to

Re: OT using absolute paths in scripts

2013-01-14 Thread Philip Guenther
On Mon, Jan 14, 2013 at 1:14 AM, Jeremie Le Hen jere...@le-hen.org wrote: On Sun, Jan 13, 2013 at 07:12:23PM +0100, Marc Espie wrote: On Sun, Jan 13, 2013 at 11:04:08AM -0600, Maximo Pech wrote: They mandate that on all shell scripts we have to use absolute paths for every single command.

Re: [obsd] Re: OT using absolute paths in scripts

2013-01-14 Thread Jeremie Le Hen
On Mon, Jan 14, 2013 at 02:16:24AM -0800, Philip Guenther wrote: On Mon, Jan 14, 2013 at 1:14 AM, Jeremie Le Hen jere...@le-hen.org wrote: On Sun, Jan 13, 2013 at 07:12:23PM +0100, Marc Espie wrote: On Sun, Jan 13, 2013 at 11:04:08AM -0600, Maximo Pech wrote: They mandate that on all

Re: [obsd] Re: OT using absolute paths in scripts

2013-01-14 Thread Marc Espie
On Mon, Jan 14, 2013 at 11:48:04AM +0100, Jeremie Le Hen wrote: On Mon, Jan 14, 2013 at 02:16:24AM -0800, Philip Guenther wrote: On Mon, Jan 14, 2013 at 1:14 AM, Jeremie Le Hen jere...@le-hen.org wrote: On Sun, Jan 13, 2013 at 07:12:23PM +0100, Marc Espie wrote: On Sun, Jan 13, 2013 at

Re: OT using absolute paths in scripts

2013-01-14 Thread Claer
On Sun, Jan 13 2013 at 04:11, Maximo Pech wrote: At work, we have an information security area for IT. They mandate that on all shell scripts we have to use absolute paths for every single command. I feel that this does not provide real security and only makes scripts somewhat more

Re: OT using absolute paths in scripts

2013-01-14 Thread Andres Perera
On Mon, Jan 14, 2013 at 1:49 PM, Claer cl...@claer.hammock.fr wrote: On Sun, Jan 13 2013 at 04:11, Maximo Pech wrote: At work, we have an information security area for IT. They mandate that on all shell scripts we have to use absolute paths for every single command. I feel that this does

OT using absolute paths in scripts

2013-01-13 Thread Maximo Pech
At work, we have an information security area for IT. They mandate that on all shell scripts we have to use absolute paths for every single command. I feel that this does not provide real security and only makes scripts somewhat more painful to write. What's your opinion on this?

Re: OT using absolute paths in scripts

2013-01-13 Thread Nuno Magalhães
Well, If a user's $PATH gets compromised, they may run ~/saltedls instead of /bin/ls... dunno, something like that. If you use variables at the beginning of the script it becomes somewhat less painful.

Re: OT using absolute paths in scripts

2013-01-13 Thread Marc Espie
On Sun, Jan 13, 2013 at 11:04:08AM -0600, Maximo Pech wrote: At work, we have an information security area for IT. They mandate that on all shell scripts we have to use absolute paths for every single command. I feel that this does not provide real security and only makes scripts somewhat

Re: OT using absolute paths in scripts

2013-01-13 Thread Nick Holland
On 01/13/13 12:03, Maximo Pech wrote: At work, we have an information security area for IT. They mandate that on all shell scripts we have to use absolute paths for every single command. I feel that this does not provide real security and only makes scripts somewhat more painful to write.

Re: OT using absolute paths in scripts

2013-01-13 Thread Marc Espie
On Sun, Jan 13, 2013 at 07:12:23PM +0100, Marc Espie wrote: On Sun, Jan 13, 2013 at 11:04:08AM -0600, Maximo Pech wrote: At work, we have an information security area for IT. They mandate that on all shell scripts we have to use absolute paths for every single command. I feel that