From nobody Wed Dec 18 13:47:04 2024 X-Original-To: freebsd-arch@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YCw3D16v0z5hN2T for ; Wed, 18 Dec 2024 13:47:20 +0000 (UTC) (envelope-from tomek@cedro.info) Received: from mail-yb1-xb2e.google.com (mail-yb1-xb2e.google.com [IPv6:2607:f8b0:4864:20::b2e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YCw3C3x6tz4FGh for ; Wed, 18 Dec 2024 13:47:19 +0000 (UTC) (envelope-from tomek@cedro.info) Authentication-Results: mx1.freebsd.org; none Received: by mail-yb1-xb2e.google.com with SMTP id 3f1490d57ef6-e3978c00a5aso4960596276.1 for ; Wed, 18 Dec 2024 05:47:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cedro.info; s=google; t=1734529638; x=1735134438; darn=freebsd.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=D08QZu7iHEDT4rJygozm5ft8M785JZW3lFAlB00xIYU=; b=A1x5sAgyFalpUOi+CBY1+onNgvlzBm14eYHQO9SDUn9TcGKf2IW8wGoxPVli4lgd44 Mim5J4ga+OdILvrtT2fNhN5J61rYjrTCfEYAfclxHJSH763n3WRGZQuWwZ2nSlhgQT4g VVdJj2WbMH/268zElQy69iUgvr/HCJKeX/ZLBsFo3LItaXZOWqUjCDldJVyQjMAEycbd lbhuU8Wy7E7f6K3oBwF2GL0yuZADZOGLUM9VImooIg1fPSZq6UPrdz/D0h/uDqNmN2hB rVqOw2DgSiUJMyTkctcHHcn255mJ4EwYw097eeY2HGCcIAE63lblhR/LQ9RW+mmh1xoQ nXzg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1734529638; x=1735134438; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=D08QZu7iHEDT4rJygozm5ft8M785JZW3lFAlB00xIYU=; b=fMQmkF5n7r6iv0H/m3fgWSpQKkFBYRfhKRpF7tN3iLYasYdXBijRF/afgD/6yOpqr7 PrmrXhU3Ud6uGHQr5UK32VTGA7mO9W9u+aQZJpE4m77gxnCXzmPZZ2qGh6EMAzE8TAep J+wVCpeF/Zd0eHBHROdciktDspk++2EPPUebhbXd/sUB7M11B9ldT1n2Iz+/mZUbo7N5 omECMqcjbU48bwowvyg2k/SvhKMR6M2on9C9pP8TUqOvEODIrHOmJB8DA3+NmmWocCCc ar4cAhNidJSUGd4CqN+vq93ujFb5ByCMR69ViLvG6i8pMiJ3JjZeDflCVqyEiApkPEpM iyiQ== X-Gm-Message-State: AOJu0Yxllsh3Rk5MnRMzKkLc+0y/TKyuNLM8UT6n5Kv20mg1CXnTazt4 8R8skmqFH5zOfTWhP1X3qn/Ylok7NWqVgtvrcJ1fBN0RJmijrF8saGgOPS1mXQ== X-Gm-Gg: ASbGnctCmeZ5MTh+eXBNbIWkdX5Pt0cyXAfAOi6FncnZEKyuO0PpSncJo99DuiiUMGN 9Vzz7WI6NWwaAx+KLsDAnDbwssjkRuj3igrfyCsz81mknDzBRJSPZwwhpb2BSf64GXk9JwM3C0F /HOcP/+bufxoxa7c4hWdzrCojdoPXd8Nt417d/hn7wyoFPhOpjUQLhu4oDSU0WIm677K6UEaGom HXvtAS7tclpDFbS/iURbvdkeyVXZdq2fqAU78+fr5RpFT1LN77OWaa9CR58qOYQmZ/Atgp0mM6h pusQoKjxU/aGSG0C4g== X-Google-Smtp-Source: AGHT+IECtvoE+UMm426O9x9CShLs+B1sd8SYWz9SpD7jDDcaGTzOuQHca5DeMfKxI0r7JrflMwbG7Q== X-Received: by 2002:a05:6902:2845:b0:e48:5b35:af26 with SMTP id 3f1490d57ef6-e5362116253mr2409892276.12.1734529638344; Wed, 18 Dec 2024 05:47:18 -0800 (PST) Received: from mail-yw1-f176.google.com (mail-yw1-f176.google.com. [209.85.128.176]) by smtp.gmail.com with ESMTPSA id 3f1490d57ef6-e470449fd6dsm2274420276.34.2024.12.18.05.47.16 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 18 Dec 2024 05:47:16 -0800 (PST) Received: by mail-yw1-f176.google.com with SMTP id 00721157ae682-6f277a1ecfdso43606277b3.2; Wed, 18 Dec 2024 05:47:16 -0800 (PST) X-Received: by 2002:a05:690c:88f:b0:6f2:8781:32dc with SMTP id 00721157ae682-6f3d267a903mr20490437b3.30.1734529635491; Wed, 18 Dec 2024 05:47:15 -0800 (PST) List-Id: Discussion related to FreeBSD architecture List-Archive: https://lists.freebsd.org/archives/freebsd-arch List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-arch@FreeBSD.org MIME-Version: 1.0 References: <0d63a94d-2773-4efd-b789-0b753ab38b91@FreeBSD.org> In-Reply-To: <0d63a94d-2773-4efd-b789-0b753ab38b91@FreeBSD.org> From: Tomek CEDRO Date: Wed, 18 Dec 2024 14:47:04 +0100 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: Removing shar(1) To: Kyle Evans Cc: freebsd-arch@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US] X-Rspamd-Queue-Id: 4YCw3C3x6tz4FGh X-Spamd-Bar: ---- On Wed, Dec 18, 2024 at 3:27=E2=80=AFAM Kyle Evans wro= te: > Hi, > I was reminded the other day that shar(1) exists, though it's use is no > longer recommended in ports. The same functionality can be found in > tar(1) instead, so I think we should deorbit /usr/bin/shar and stop > promoting it entirely. sh(1) archives are really problematic from a > user standpoint for at least one reason best explained by the manpage: > It is easy to insert trojan horses into shar files. It is strongly > recommended that all shell archive files be examined before running > them through sh(1). Archives produced using this implementation of > shar may be easily examined with the command: > egrep -av '^[X#]' shar.file > It's hard to advocate for their use in good conscience, much like it's > hard to advocate curl|sh pipes. > Review: https://reviews.freebsd.org/D48130 > Thanks, > Kyle Evans Hey there Kyle :-) Removing tools completely is not a good choice, but moving them from base to ports in case someone needs to use them for any reason would be a better choice? :-) There are still lots of installers using shar like approach, or even worse things like feeding shell scripts directly from a remote url (i.e. brew installer on macos). If people decide to remove shar from base it still should be available from ports. If the idea is to remove shar completely and provide no alternative then sounds like NO for me :-) --=20 CeDeROM, SQ7MHZ, http://www.tomek.cedro.info