git: 4ce976c56fcb - stable/14 - shar: add a deprecation notice

From: Kyle Evans <kevans_at_FreeBSD.org>
Date: Sat, 11 Jan 2025 02:49:01 UTC
The branch stable/14 has been updated by kevans:

URL: https://cgit.FreeBSD.org/src/commit/?id=4ce976c56fcb7a6687d956244f8ef7b37ca38025

commit 4ce976c56fcb7a6687d956244f8ef7b37ca38025
Author:     Kyle Evans <kevans@FreeBSD.org>
AuthorDate: 2025-01-02 02:15:36 +0000
Commit:     Kyle Evans <kevans@FreeBSD.org>
CommitDate: 2025-01-11 02:48:26 +0000

    shar: add a deprecation notice
    
    The shar(1) program is simple, but the fundamental idea of a sh archive
    is risky at best and one that we probably shouldn't be promoting as
    prominently as a program in $PATH and a manpage.  Let's deprecate and
    remove it, since the same functionality can easily be found in
    tar(1) instead.
    
    Reviewed by:    emaste, philip
    Reviewed by:    allanjude, brooks, delphij, des, imp, rpokala (previous)
    
    (cherry picked from commit f68ee0e7a1e8732f725cad4ac708ec49093782d4)
    (cherry picked from commit 2832af7b4ea256b18ef4dbf2ff97a50765f0609a)
---
 usr.bin/shar/shar.1 | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/usr.bin/shar/shar.1 b/usr.bin/shar/shar.1
index 3a49c9ee06e3..9b74745970c9 100644
--- a/usr.bin/shar/shar.1
+++ b/usr.bin/shar/shar.1
@@ -27,12 +27,29 @@
 .\"
 .\"     @(#)shar.1	8.1 (Berkeley) 6/6/93
 .\"
-.Dd January 31, 2019
+.Dd January 1, 2025
 .Dt SHAR 1
 .Os
 .Sh NAME
 .Nm shar
 .Nd create a shell archive of files
+.Sh DEPRECATION NOTICE
+.Nm
+is obsolete and may not be present in
+.Fx 15
+and later.
+Because shell archives are simultaneously data and code and are typically
+interpreted by
+.Xr sh 1 ,
+they can easily be trojan-horsed and pose a significant security risk to users.
+The
+.Xr tar 1
+utility can still produce shar encodings of files if needed.
+The
+.Pa sysutils/freebsd-shar
+port has been created to maintain this version of
+.Nm
+past its deprecation in base.
 .Sh SYNOPSIS
 .Nm
 .Ar