Your message dated Thu, 01 Feb 2007 11:32:46 -0500
with message-id <[EMAIL PROTECTED]>
and subject line Bug#409276: coreutils: ls with asterix extension does not show 
every file
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: coreutils
Version: 5.97-5
Severity: normal

Steps to reproduce the bug:
1. make a pdf begining with "-p", eg. "-pfoobar.pdf" in Konquerror 
(touch won´t work)
2. start a console and change to the directory where the file is
3. type ls -a *.pdf
4. Notice that the file starting with "-p" is not listet.
5. Type kpdf "./-pfoobar.pdf" now kpdf starts with the file.

I think this is a possible security risk, cause it is possible to hide 
files. But if you use "ls" without any parameters the file is shown. 
Because of this, I used severity normal and nothing higher.

Cheers Stefan

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.19.2-grsec
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages coreutils depends on:
ii  libacl1                     2.2.41-1     Access control list shared library
ii  libc6                       2.3.6.ds1-10 GNU C Library: Shared libraries
ii  libselinux1                 1.32-3       SELinux shared libraries

coreutils recommends no packages.

-- no debconf information


--- End Message ---
--- Begin Message ---
On Thu, Feb 01, 2007 at 05:05:49PM +0100, Stefan Hirschmann wrote:
Steps to reproduce the bug:
1. make a pdf begining with "-p", eg. "-pfoobar.pdf" in Konquerror (touch won?t work)

touch will work fine:

touch ./-p

2. start a console and change to the directory where the file is
3. type ls -a *.pdf
4. Notice that the file starting with "-p" is not listet.
5. Type kpdf "./-pfoobar.pdf" now kpdf starts with the file.

I think this is a possible security risk, cause it is possible to hide files. But if you use "ls" without any parameters the file is shown. Because of this, I used severity normal and nothing higher.

That's just the way shell expansion works. Similar things will happen with any command if you use wildcards. You can use -- to indicate the end of argument processing:
ls -- *.pdf

Mike Stone

--- End Message ---

Reply via email to