3 ms·
One of my favourites, archive filenames containing a colon ':' character cause GNU tar to execute a command, historically rsh (remote shell), but thanks to the
by brynet 4y ago
One of my favourites, archive filenames containing a colon ':' character cause GNU tar to execute a command, historically rsh (remote shell), but thanks to the Linux alternatives system, is often aliased to ssh. This was added many years ago to support remote tape drives.
GNU tar might randomly make network connections, so sanitize your archive names, I guess..
- jakeogh 4y agoI had to check that because it sounds too "execute arb shell scripts on dhcp lease" to still be there... but there it is... decades later and --force-local not the default? It's almost worse that rsh isn't installed on most systems. pledge(2) is the correct model.