On 10/19/16 1:46 PM, Stein Arne Storslett wrote:
> Bash Version: 4.2
> Patch Level: 46
> Release Status: release
>
> Description:
> Bash history / reverse-i-search will execute the command found
> if the ssh process is killed.
> This happens with the combination of:
> - ssh into server
> - sudo su -
> - reverse-i-search # <ctrl>+R
>
> I.e. a user in the middle of a bash reverse-i-search, and the
> ssh process is killed
> i.e. due to a network outage.
>
> This can be critical if the command in the search history is
> something harmful or potentially unwanted, like a server shutdown
>
> The chain of events during the kill, and how the sub processes
> are killed might be the cause here, but nevertheless no signal
> should cause the bash history command to run.
Part of this was fixed in bash-4.3, and the issue has been completely
resolved in bash-4.4.
Chet
--
``The lyf so short, the craft so long to lerne.'' - Chaucer
``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU [email protected] http://cnswww.cns.cwru.edu/~chet/
