On 2024-04-08 14:02, Greg Wooledge wrote:
On Mon, Apr 08, 2024 at 12:40:55PM +0700, Robert Elz wrote:
or perhaps better just:
main() { ... } ; main "$@"
You'd want to add an "exit" as well, to protect against new lines of
code being appended to the script.
Yes that is correct. it's far easier to add new lines then to edit the
content unnoticed, since you would have to know where you can insert or
replace something, eg. a comment.
Btw wouldn't it be possible (and worth) temporarily revoking write
access to the user while it's being executed as root, and restoring
original rights after execution? The problem isn't really how it's
executed, but that it's writable during execution...
This could of course leave the temporary rights if the process is
killed...
Tibor
