Re: security(8) setuid checks and space character in file name

2010-12-31 Thread MERIGHI Marcus
o...@drijf.net (Otto Moerbeek), 2010.12.30 (Thu) 20:53 (CET): > On Thu, Dec 30, 2010 at 12:08:33AM +0100, Ingo Schwarze wrote: > > > I consider this a bug in security(8). > > > > The following is the best i could come up with so far; make sure > > to wear your sed-peril-proof sunglasses before re

Re: security(8) setuid checks and space character in file name

2010-12-30 Thread Nicholas Marriott
Er, that would need other changes as well. Ignore me... On Thu, Dec 30, 2010 at 10:12:07PM +, Nicholas Marriott wrote: > Or could use stat(1) to put the item to be sorted at the start, albeit > ending up with a different format from ls: > > find -print0 | xargs -0 -r stat -f '%-40N %-10

Re: security(8) setuid checks and space character in file name

2010-12-30 Thread Nicholas Marriott
Or could use stat(1) to put the item to be sorted at the start, albeit ending up with a different format from ls: find -print0 | xargs -0 -r stat -f '%-40N %-10Su %-10Sg %Sp' | sort On Thu, Dec 30, 2010 at 08:53:39PM +0100, Otto Moerbeek wrote: > On Thu, Dec 30, 2010 at 12:08:33AM +0100, In

Re: security(8) setuid checks and space character in file name

2010-12-30 Thread Otto Moerbeek
On Thu, Dec 30, 2010 at 12:08:33AM +0100, Ingo Schwarze wrote: > I consider this a bug in security(8). > > The following is the best i could come up with so far; make sure > to wear your sed-peril-proof sunglasses before reading the patch. > > This still mangles the file name, but at least you h

Re: security(8) setuid checks and space character in file name

2010-12-30 Thread patrick keshishian
On Thu, Dec 30, 2010 at 10:02 AM, Ted Unangst wrote: > On Wed, Dec 29, 2010 at 6:08 PM, Ingo Schwarze wrote: >> I consider this a bug in security(8). >> >> The following is the best i could come up with so far; make sure >> to wear your sed-peril-proof sunglasses before reading the patch. >> >> T

Re: security(8) setuid checks and space character in file name

2010-12-30 Thread patrick keshishian
On Thu, Dec 30, 2010 at 11:02 AM, Theo de Raadt wrote: >> On Wed, Dec 29, 2010 at 6:08 PM, Ingo Schwarze wrote: >> > I consider this a bug in security(8). >> > >> > The following is the best i could come up with so far; make sure >> > to wear your sed-peril-proof sunglasses before reading the pat

Re: security(8) setuid checks and space character in file name

2010-12-30 Thread Theo de Raadt
> On Wed, Dec 29, 2010 at 6:08 PM, Ingo Schwarze wrote: > > I consider this a bug in security(8). > > > > The following is the best i could come up with so far; make sure > > to wear your sed-peril-proof sunglasses before reading the patch. > > > > This still mangles the file name, but at least yo

Re: security(8) setuid checks and space character in file name

2010-12-30 Thread Ted Unangst
On Wed, Dec 29, 2010 at 6:08 PM, Ingo Schwarze wrote: > I consider this a bug in security(8). > > The following is the best i could come up with so far; make sure > to wear your sed-peril-proof sunglasses before reading the patch. > > This still mangles the file name, but at least you have a chanc

Re: security(8) setuid checks and space character in file name

2010-12-30 Thread MERIGHI Marcus
Hello Ingo, schwa...@usta.de (Ingo Schwarze), 2010.12.30 (Thu) 00:08 (CET): > I consider this a bug in security(8). > > The following is the best i could come up with so far; make sure > to wear your sed-peril-proof sunglasses before reading the patch. Would have taken me ages to come up with

Re: security(8) setuid checks and space character in file name

2010-12-29 Thread Ingo Schwarze
I consider this a bug in security(8). The following is the best i could come up with so far; make sure to wear your sed-peril-proof sunglasses before reading the patch. This still mangles the file name, but at least you have a chance to find it on your disk. Anybody has a better plan? I already