Subject: Re: useradd: spaces and $ in usernames
To: None <tech-userlevel@netbsd.org>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: tech-userlevel
Date: 11/19/2001 20:54:42
>>> + /* This should cover most shells :-( */
>>> + static char meta[] = "\n \t'`\";&<>()|*?{}[]\\$!#^~";
>> Wouldn't it be better to decide that certain characters are safe,
>> and then escape everything else?
>> Consider « or » or ¦, which could reasonably be metacharacters...
> In what shell?
Any that supports <<, >>, and |, and wants to do Latin-1. In
French-speaking regions, « and » are more likely to be quoting
metacharacters than redirection metacharacters, but still
metacharacters.
Not that it really matters much - the point of "ensure that anything
not specifically thought about is unsafe" is as valid - or invalid - as
ever regardless of the details of the example.
/~\ The ASCII der Mouse
\ / Ribbon Campaign
X Against HTML mouse@rodents.montreal.qc.ca
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B