MIME-Version: 1.0
References: <7aac3298-e217-7dfe-6787-ad1b69f43fc4@morningstar2.co.uk>
            <CALD=Yf9vd=b2GRr9G7ro=kNg0JttdH6TGmGNiaMDbeYNDTGGzQ@mail.gmail.com>
            <44b7823e-d23a-6662-d777-f3b30ac4b2b5@morningstar2.co.uk>
Content-Type: multipart/alternative; boundary="000000000000b58834057433a142"
Message-ID:  <CALD=Yf-2_c+JQZErQfd0F1VJkHnGqfTEDk=PE207NMfTUhOfNg@mail.gmail.com>
Date:         Fri, 24 Aug 2018 20:46:27 +0100
Reply-To:     Mailing list for the LaTeX3 project
              <LATEX-L@LISTSERV.UNI-HEIDELBERG.DE>
Sender:       Mailing list for the LaTeX3 project <LATEX-L@LISTSERV.UNI-HEIDELBERG.DE>
From:         Jonathan Fine <jfine2358@GMAIL.COM>
Subject: Re: System shell functions
To:           LATEX-L@LISTSERV.UNI-HEIDELBERG.DE
In-Reply-To:  <44b7823e-d23a-6662-d777-f3b30ac4b2b5@morningstar2.co.uk>
Precedence: list
Envelope-To: <rainer.schoepf@GMX.NET>
Status: R

--000000000000b58834057433a142
Content-Type: text/plain; charset="UTF-8"

Hi Joseph

Thank you for your prompt response. You wrote

> Once one allows unrestricted shell escape, all bets are off in terms of
what
> an arbitrary package can do.

Your implication is that "restricted shell escape" both

   1. reduces what an arbitrary package can do
   2. improves security

Please provide some evidence for (1), by for example providing references
to the source code and tests.

For (2), this also needs to be argued. Suppose software item AAA-SECURE is
not, in fact, secure. Then AAA-SECURE is already a security risk, because
its name allows a social engineering exploit, which perhaps can then be
leveraged.

By the way, the usual meaning of "restricted shell escape" is as in
https://en.wikipedia.org/wiki/Restricted_shell. This page tell us: The
restricted shell is not secure.

The TeX/LaTeX community has a different meaning for "restricted shell
escape". As you are using the term in this new way, please would you
provide a definition.

Please also would you discuss:
http://tex-live.tug.narkive.com/1iD2CkdT/security-issues-for-restricted-shell-escape
.

with best regards

Jonathan

--000000000000b58834057433a142
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Joseph<div><br></div><div>Thank you for your prompt res=
ponse. You wrote<br><br>&gt; Once one allows unrestricted shell escape, all=
 bets are off in terms of what<br>&gt; an arbitrary package can do.</div><d=
iv><br></div><div>Your implication is that &quot;restricted shell escape&qu=
ot; both</div><div><ol><li>reduces what an arbitrary package can do<br></li=
><li>improves security</li></ol><div>Please provide some evidence for (1), =
by for example providing references to the source code and tests.</div><div=
><br></div><div>For (2), this also needs to be argued. Suppose software ite=
m AAA-SECURE is not, in fact, secure. Then AAA-SECURE is already a security=
 risk, because its name allows a social engineering exploit, which perhaps =
can then be leveraged.</div><div><br></div><div>By the way, the usual meani=
ng of &quot;restricted shell escape&quot; is as in=C2=A0<span style=3D"font=
-size:small;background-color:rgb(255,255,255);text-decoration-style:initial=
;text-decoration-color:initial;float:none;display:inline"><a href=3D"https:=
//en.wikipedia.org/wiki/Restricted_shell">https://en.wikipedia.org/wiki/Res=
tricted_shell</a>. This page tell us: The restricted shell is not secure.</=
span></div><div><span style=3D"font-size:small;background-color:rgb(255,255=
,255);text-decoration-style:initial;text-decoration-color:initial;float:non=
e;display:inline"><br></span></div><div><span style=3D"font-size:small;back=
ground-color:rgb(255,255,255);text-decoration-style:initial;text-decoration=
-color:initial;float:none;display:inline">The TeX/LaTeX community has a dif=
ferent meaning for=C2=A0<span style=3D"text-decoration-style:initial;text-d=
ecoration-color:initial;float:none;display:inline">&quot;restricted shell e=
scape&quot;. As you are using the term in this new way, please would you pr=
ovide a definition.</span></span></div><div><span style=3D"font-size:small;=
background-color:rgb(255,255,255);text-decoration-style:initial;text-decora=
tion-color:initial;float:none;display:inline"><span style=3D"text-decoratio=
n-style:initial;text-decoration-color:initial;float:none;display:inline"><b=
r></span></span></div><div><span style=3D"font-size:small;background-color:=
rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initia=
l;float:none;display:inline"><span style=3D"text-decoration-style:initial;t=
ext-decoration-color:initial;float:none;display:inline">Please also would y=
ou discuss:=C2=A0<span style=3D"font-size:small;background-color:rgb(255,25=
5,255);text-decoration-style:initial;text-decoration-color:initial;float:no=
ne;display:inline"><a href=3D"http://tex-live.tug.narkive.com/1iD2CkdT/secu=
rity-issues-for-restricted-shell-escape">http://tex-live.tug.narkive.com/1i=
D2CkdT/security-issues-for-restricted-shell-escape</a>.</span></span></span=
></div><div><br></div></div><div>with best regards</div><div><br></div><div=
>Jonathan</div></div>

--000000000000b58834057433a142--