Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.001 X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'feedback.': 0.04; 'parser': 0.07; 'string': 0.09; 'parameter': 0.09; 'parsed': 0.09; 'parsing': 0.09; 'pgp': 0.09; 'yeah,': 0.09; 'cc:addr:python- list': 0.11; 'argument.': 0.16; 'merely': 0.16; 'positive,': 0.16; 'programs),': 0.16; 'slash': 0.16; 'sudo': 0.16; 'which,': 0.16; 'wrote:': 0.18; 'trying': 0.19; 'implementing': 0.19; 'thu,': 0.19; 'command': 0.22; 'memory': 0.22; 'shell': 0.22; 'cc:addr:python.org': 0.22; 'header:User-Agent:1': 0.23; 'cc:2**0': 0.24; 'header:In-Reply-To:1': 0.27; 'chris': 0.29; 'am,': 0.29; 'tim': 0.29; '(which': 0.31; '(maybe': 0.31; 'figure': 0.32; 'another': 0.32; 'entirely': 0.33; 'anywhere': 0.35; 'there': 0.35; 'false': 0.36; 'done': 0.36; 'thanks': 0.36; 'possible': 0.36; 'searching': 0.37; 'nov': 0.38; 'short': 0.38; 'itself': 0.39; 'tell': 0.60; 'simply': 0.61; 'more': 0.64; 'acts': 0.74; 'banks,': 0.84; 'to:none': 0.92 Date: Wed, 26 Nov 2014 09:36:47 -0600 From: Tim Daneliuk User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 MIME-Version: 1.0 Newsgroups: comp.lang.python CC: "python-list@python.org" Subject: Re: Quotation Ugliness References: <54756D5F.4040806@tundraware.com> <20141126082606.281ff681@bigbox.christie.dr> In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.4.3 (ozzie.tundraware.com [75.145.138.73]); Wed, 26 Nov 2014 09:36:48 -0600 (CST) X-TundraWare-MailScanner-Information: Please contact the ISP for more information X-TundraWare-MailScanner-ID: sAQFal5Z037902 X-TundraWare-MailScanner: Found to be clean X-TundraWare-MailScanner-From: tundra@tundraware.com X-Spam-Status: No X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Message-ID: Lines: 28 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1417016231 news.xs4all.nl 2955 [2001:888:2000:d::a6]:37999 X-Complaints-To: abuse@xs4all.nl Path: csiph.com!usenet.pasdenom.info!bete-des-vosges.org!feed.ac-versailles.fr!nerim.net!novso.com!newsfeed.xs4all.nl!newsfeed4.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail Xref: csiph.com comp.lang.python:81586 On 11/26/2014 09:09 AM, Chris Angelico wrote: > On Thu, Nov 27, 2014 at 2:07 AM, Chris Angelico wrote: >> I was searching the ol' memory banks, trying to figure out if there >> was some way to tell the internal 'echo' command to use slash instead >> of dash (maybe for DOS/Windows people??), in which case that would be >> parsed as "echo -- hello" and would indeed simply echo "hello". > > Speaking of which, it's entirely possible to have a "-sudo" parameter > to a command (which would be "-s -u -d -o" to many programs), so > that's another way to get a false positive. > > ChrisA > Yeah, there is no foolproof way to do this short of implementing a parser that acts exactly as the shell itself would when parsing the command line. The more I think about this, the more I think I am just going to look for the string 'sudo' anywhere in the argument. This merely will force the user to enter their sudo password if detected. If it turns out to be a false positive, no harm will be done and the password will just go unused. Thanks for the feedback. ---------------------------------------------------------------------------- Tim Daneliuk tundra@tundraware.com PGP Key: http://www.tundraware.com/PGP/