Path: csiph.com!usenet.pasdenom.info!dedibox.gegeweb.org!gegeweb.eu!nntpfeed.proxad.net!proxad.net!feeder1-1.proxad.net!ecngs!feeder2.ecngs.de!81.171.88.16.MISMATCH!hq-usenetpeers.eweka.nl!hq-usenetpeers.eweka.nl!bcyclone04.am1.xlned.com!bcyclone04.am1.xlned.com!newsfeed.xs4all.nl!newsfeed2.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path: <rosuav@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.010
X-Spam-Evidence: '*H*': 0.98; '*S*': 0.00; 'string': 0.09; 'cc:addr :python-list': 0.11; 'argument.': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'merely': 0.16; 'password,': 0.16; 'positive,': 0.16; 'program?': 0.16; 'reasonable.': 0.16; 'sudo': 0.16; 'wrote:': 0.18; 'thu,': 0.19; 'cc:addr:python.org': 0.22; 'cc:2**0': 0.24; 'header:In-Reply-To:1': 0.27; 'am,': 0.29; 'tim': 0.29; 'message-id:@mail.gmail.com': 0.30; 'breaking': 0.31; 'could': 0.34; 'anywhere': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'false': 0.36; 'done': 0.36; 'two': 0.37; 'nov': 0.38; 'bad': 0.39; 'more': 0.64; 'to:none': 0.92
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:cc :content-type; bh=KqcE9DoKv+ObKpbp0FBLGvHTsoa1Zyb1e7HgS6wrIiw=; b=Aelr1oGEM/TY4aPNXybwaTK6gYCvXHrjuf06dhv1S1zDWRxQj0uuoUzscnxb9piy5t bUARo2KuaQTRTCf+2YOgaenTgq+dq4ASyiojtGd8/iA7Y0XUj1dCpTuyfa8a9+RFdGsc 2r1yhUa5Jl90qHNb35p3tLYYKcoB0etVYn6w3P2wa+DqwEDmXzJs6mzyVneIAzr5Y6cO u0hsasph37RUImKR+tpB4l+1kTbcBtSjLaFfwJS82rRsKHw9mSAeuTW/eHSQ+H0mcKFr CjL2Yce8wtH6KlpR2rAqwOB7CLDDU/zodW6q1H8H/RGnSlaKL7LnAns6ssCTnxybH9xR LYSA==
MIME-Version: 1.0
X-Received: by 10.42.106.12 with SMTP id x12mr34416516ico.26.1417016890674; Wed, 26 Nov 2014 07:48:10 -0800 (PST)
In-Reply-To: <5475F38F.5010501@tundraware.com>
References: <grifkb-kpo1.ln1@ozzie.tundraware.com> <mailman.16304.1416966896.18130.python-list@python.org> <54756D5F.4040806@tundraware.com> <mailman.16320.1417007333.18130.python-list@python.org> <qot7fyikrch.fsf@ruuvi.it.helsinki.fi> <20141126082606.281ff681@bigbox.christie.dr> <CAPTjJmrbJrZNKiZY19SOU04pGyO6hBHA4RZDgp5vKduug4vkJA@mail.gmail.com> <mailman.16331.1417014557.18130.python-list@python.org> <5475F38F.5010501@tundraware.com>
Date: Thu, 27 Nov 2014 02:48:10 +1100
Subject: Re: Quotation Ugliness
From: Chris Angelico <rosuav@gmail.com>
Cc: "python-list@python.org" <python-list@python.org>
Content-Type: text/plain; charset=UTF-8
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.16337.1417016893.18130.python-list@python.org>
Lines: 14
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1417016893 news.xs4all.nl 2944 [2001:888:2000:d::a6]:47107
X-Complaints-To: abuse@xs4all.nl
X-Received-Body-CRC: 1169945947
X-Received-Bytes: 3995
Xref: csiph.com comp.lang.python:81589

On Thu, Nov 27, 2014 at 2:36 AM, Tim Daneliuk <tundra@tundraware.com> wrote:
> The more I think about this, the more I think I am just going to look for
> the
> string 'sudo' anywhere in the argument.  This merely will force the user to
> enter their sudo password if detected.  If it turns out to be a false
> positive,
> no harm will be done and the password will just go unused.

That sounds reasonable; imperfect, but reasonable. But what happens if
the password "goes unused"? Will it be provided on stdin to the
program? That could be VERY bad in two ways (revealing the password,
and breaking the program's expectations).

ChrisA