Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!eweka.nl!lightspeed.eweka.nl!194.134.4.91.MISMATCH!news2.euro.net!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.000 X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'subject:: [': 0.03; 'argument': 0.04; 'skip:/ 10': 0.07; 'subject:How': 0.09; 'python': 0.09; 'grep': 0.09; 'subject:command': 0.09; 'cc:addr :python-list': 0.10; 'looked': 0.10; 'subject:python': 0.11; '0.6': 0.16; 'aux': 0.16; 'cc:name:python list': 0.16; 'echo': 0.16; 'shell:': 0.16; 'subject:Tutor': 0.16; 'subject:run': 0.16; 'wrote:': 0.17; 'specify': 0.17; 'thu,': 0.17; 'accepting': 0.18; 'jan': 0.18; 'shell': 0.18; '>>>': 0.18; 'input': 0.18; 'subject:] ': 0.19; 'variable': 0.20; 'email addr:gmail.com>': 0.20; 'all,': 0.21; 'trying': 0.21; '>>>': 0.22; 'class.': 0.23; 'command': 0.24; 'cc:addr:python.org': 0.25; 'header:In- Reply-To:1': 0.25; 'url:wiki': 0.26; 'am,': 0.27; 'cc:addr:gmail.com': 0.27; 'cc:2**2': 0.27; 'message- id:@mail.gmail.com': 0.27; 'lines': 0.28; 'run': 0.28; 'arts': 0.29; 'multiline': 0.29; 'url:mailman': 0.29; 'skip:& 10': 0.29; 'code': 0.31; 'url:python': 0.32; 'file': 0.32; 'url:listinfo': 0.32; 'skip:s 30': 0.33; 'skip:& 20': 0.33; 'received:google.com': 0.34; 'thanks': 0.34; 'skip:* 20': 0.35; 'especially': 0.35; 'received:209.85': 0.35; 'something': 0.35; 'there': 0.35; 'but': 0.36; 'url:org': 0.36; 'anything': 0.36; 'skip:p 20': 0.36; 'execute': 0.37; 'received:209': 0.37; 'possible.': 0.38; 'several': 0.39; 'header:Received:5': 0.40; 'url:mail': 0.40; 'skip:\xc2 10': 0.62; 'within': 0.64; 'making': 0.64; 'dangerous': 0.66; 'directly.': 0.78; 'day!': 0.83; '2013': 0.84 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=omZdLneIW6CWnrgqiBdJc2x8I2xqjVegqeg15EVR1vU=; b=oox0zm3U5CDikH6N6D6txJUoNKxr6RyXeJ3K9bBaVeJrrGN5RhPmPThHkoMngaBSNf iELtaWhdEzZj/Jgs2JNdfRz+WaZ7x5rrkx0pbkxK3tpepLNzhaQZs4OUce6sECgU1BwG a2jMoa9tMMrsE1I9EmhzQ0LuzTdPkBqqTMTnl/DPk6bd2mxSa+kBBdZyXmCYZrJ60Ppa DfUuvLZOtGns6Un+JdHy0eyEcMFCHQsUjyJkdurUv8ATGuHX5t8IKJ+Bu0MIZdrl8+il E7OLvtivGiBBG4y0gv9QcKOFSoaqrXvSU/E0E1X/tQcbIKw26tUam4JnANRKMXFkA5so DAlQ== MIME-Version: 1.0 In-Reply-To: <50EECF75.5020400@gmail.com> References: <50EE5934.7090609@gmail.com> <50EECF75.5020400@gmail.com> Date: Thu, 10 Jan 2013 10:21:53 -0500 Subject: Re: [Tutor] How to run multiline shell command within python From: Matty Sarro To: Karim Content-Type: multipart/alternative; boundary=047d7b15b11b1f3c6004d2f0bdbf Cc: Python list , *tutor python , Hugo Arts X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 165 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1357831317 news.xs4all.nl 6905 [2001:888:2000:d::a6]:58094 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:36572 --047d7b15b11b1f3c6004d2f0bdbf Content-Type: text/plain; charset=UTF-8 Have you looked a the pexpect class? It works like gangbusters, especially if you're trying to run something with an interactive shell. http://www.noah.org/wiki/pexpect On Thu, Jan 10, 2013 at 9:25 AM, Karim wrote: > On 10/01/2013 09:31, Hugo Arts wrote: > > On Thu, Jan 10, 2013 at 7:01 AM, Karim wrote: > >> >> >> Hello all, >> >> I want to run multiline shell command within python without using a >> command file but directly execute several lines of shell. >> I already use *subprocess.checkoutput("csh -f my_file.csh".split())* but >> I want to know if it is posssible to avoid making file and execute >> shell lines of code directly. >> >> > Yes, this is very possible. Specify shell=True as an argument and you > can do anything you can do in a shell: > > >>> commands = """echo hello > ... echo hello | wc -l > ... ps aux | grep python""" > >>> b = subprocess.check_output(commands, shell=True) > >>> print(b.decode('ascii')) > hello > 1 > hugo 1255 1.0 0.6 777316 49924 ? Sl 09:14 0:08 > /usr/bin/python2 /usr/bi > hugo 6529 0.0 0.0 42408 7196 pts/0 S+ 09:23 0:00 python > hugo 6559 0.0 0.0 10656 1128 pts/0 S+ 09:28 0:00 grep > python > > >>> > > watch out though, accepting user input into the commands variable will > lead to shell injection, which can be a dangerous security vulnerability. > > HTH, > Hugo > > > Many thanks Hugo. It makes my day! > In my case there are no possibilities for shell injection. It is internal > to a class. > > Regards > Karim > > > -- > http://mail.python.org/mailman/listinfo/python-list > > --047d7b15b11b1f3c6004d2f0bdbf Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Have you looked a the pexpect class? It works like gangbus= ters, especially if you're trying to run something with an interactive = shell.



O= n Thu, Jan 10, 2013 at 9:25 AM, Karim <kliateni@gmail.com> = wrote:
=20 =20 =20
On 10/01/2013 09:31, Hugo Arts wrote:
On Thu, Jan 10, 2013 at 7:01 AM, Karim <kliateni@g= mail.com> wrote:


Hello all,

I want to run multiline shell command within python without using a command file but directly execute several lines of shell.
I already use *subprocess.checkoutput("csh -f my_file.csh".split())* but I want to know if it is posssible to avoid making file and execute
shell lines of code directly.


Yes, this is very possible. Specify shell=3DTrue as an argument and you can do anything you can do in a shell:

=C2=A0>>> commands =3D """echo hel= lo
... echo hello | wc -l
... ps aux | grep python"""
>>> b =3D subprocess.check_output(commands, shell=3DTrue)
>>> print(b.decode('ascii'))
hello
1
hugo =C2=A0 =C2=A0 =C2=A01255 =C2=A01.0 =C2=A00.6 777316 4= 9924 ? =C2=A0 =C2=A0 =C2=A0 =C2=A0Sl =C2=A0 09:14 =C2=A0 0:08 /usr/bin/python2 /usr/bi
hugo =C2=A0 =C2=A0 =C2=A06529 =C2=A00.0 =C2=A00.0 =C2=A042= 408 =C2=A07196 pts/0 =C2=A0 =C2=A0S+ =C2=A0 09:23 =C2=A0 0:00 python
hugo =C2=A0 =C2=A0 =C2=A06559 =C2=A00.0 =C2=A00.0 =C2=A010= 656 =C2=A01128 pts/0 =C2=A0 =C2=A0S+ =C2=A0 09:28 =C2=A0 0:00 grep python

>>>=C2=A0

watch out though, accepting user input into the commands variable will lead to shell injection, which can be a dangerous security vulnerability.

HTH,
Hugo

Many thanks Hugo. It makes my day!
In my case there are no possibilities for shell injection. It is internal to a class.

Regards
Karim


--
http://mail.python.org/mailman/listinfo/python-list


--047d7b15b11b1f3c6004d2f0bdbf--