On Wed, Jun 30, 2021 at 06:04:57PM +0200, Dennis Filder wrote:
> I find the easiest way to inspect what the ultimately executed command
> will look like after meta character evaluation is by processing the
> output of strace, e.g. like so:
> 
>   printf '/dev/null\n/dev/zero\n' > /tmp/files
>   strace -o '|grep execve' -e trace=execve \
>     -s 4096 -f sh -c "/usr/bin/xargs \
>     -a /tmp/files -n 1 -d '\n' /usr/bin/stat"

I cringe at the necessity of using strace to obtain vital debugging
information. Would it be worth to make an upstream withlist request for
debugging output of this string so that stracing sudo unnecessary? It is
quite hard to strace an suid binary.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421

Reply via email to