[arch-general] A good time to switch to dash as /bin/sh?

Leonid Isaev lisaev at umail.iu.edu
Fri Sep 26 16:16:00 UTC 2014


On Fri, Sep 26, 2014 at 07:30:29AM -0500, Drake Wilson wrote:
> [...]
> On my own desktop system, when I realized sh was bash recently I immediately
> relinked it to dash and intend to keep it that way as long as I reasonably
> can (I assume some things may break, in the current state; I'm willing to
> deal with that on my own for now).

Guys, please stop this witch hunt. If you don't trust bash, then get rid of it,
but don't forget that:
$ head -n1 /usr/bin/mkinitcpio 

So, yes ArchLinux core tools use and will continue to use 'bashisms' because
they are convenient. The bugs which started this discussion are not a big deal
anyway. They will only affect scripts that don't properly sanitize the input.
Such scripts have bigger problems to worry about IMHO. The SSH-related issue is
also insignificant because the bug will be triggered post-auth...

Leonid Isaev
GPG fingerprints: DA92 034D B4A8 EC51 7EA6  20DF 9291 EE8A 043C B8C4
                  C0DF 20D0 C075 C3F1 E1BE  775A A7AE F6CB 164B 5A6D
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <https://archlinux.org/pipermail/arch-general/attachments/20140926/a1a15a39/attachment.bin>

More information about the arch-general mailing list