Re: Potential restricted bash escape by modifying history file

2020-05-01 Thread Chet Ramey
On 4/30/20 2:22 PM, Diffie wrote: > Bash Version: 5.0 > Patch Level: 11 > Release Status: release > > *Description:* > It is possible to write/append arbitrary content to files from a restricted > bash shell (with the privileges of the current user context) by tweaking the > HISTFILE variable,

Potential restricted bash escape by modifying history file

2020-04-30 Thread Diffie
Configuration Information [Automatically generated, do not change]: Machine: x86_64 OS: linux-gnu Compiler: gcc Compilation CFLAGS: -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr