From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <klark.devel@gmail.com>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
 sa.local.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM autolearn=ham autolearn_force=no
 version=3.4.1
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
 h=subject:to:references:from:message-id:date:user-agent:mime-version
 :in-reply-to:content-transfer-encoding:content-language;
 bh=ozRti29zOuFtZuluz3AxalIgyof91Vlw3C+7ZX5KeJw=;
 b=Ko9nWf7ugEUbCIeDL1Sn1l51dsLLdrDqw/Vh0rdh1qWzE66O+lNpLKRrlPQ1M0g/Ki
 GLt7H6OqGKKWiHgNlilCYdCNy3Am18R32imkeBh7bwbTisnLFWy4zG4+BwU9+OaVhnU2
 /oNLaalbhuzIboiePIwL3fldmBI4jPEzaCIw+CD1MyIdO71O8XhCR56nrYz/y/zg2zib
 5AmBrEUMNaWNkB9P0AbUPOJ+iLlQlLDZFUUtaq9CAiHornJ/O40/YcI2TxinrGmQiMMB
 yWeBbMm9ExqmUBZgzuCPsBXI9RXVYqePxOQ23m3m/3b+1mokXWzDJV5oWnl5UGe6+tnQ
 CAVA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20210112;
 h=x-gm-message-state:subject:to:references:from:message-id:date
 :user-agent:mime-version:in-reply-to:content-transfer-encoding
 :content-language;
 bh=ozRti29zOuFtZuluz3AxalIgyof91Vlw3C+7ZX5KeJw=;
 b=62PzyUKTiqi1quSztDIToFEswm5Ww/kDe6mET5UaKYeXuCA1QnhQ+AZireYuZQiEIi
 Y8p8RC7DKzfw5l/MRFbd/rUmPzhZSOgl6kNMtD0gTFYg2ZVLtZ1H0zzVmPD1u0XKMjIh
 992K4O0uDdRBLcMSqiWHREV6yJSCEb843jNhnbHSuWUq+L+cCc+8IopfL5kAmU9hXnKI
 3UMyLExRCdqFwjN42fMJfFFa5HxrXrIzkmnyvbEl3iSnc29cjKN1jsZ3pY3+Rfq26inY
 OdH7Oav1AcYxZ1swXx4V0NxGE3mwuUJHV0j3XeYB8Uo0r3cCAt/W2EB3KxbQviSclh3i
 seHQ==
X-Gm-Message-State: AOAM53306lV3qpdeWRHqVweSIvW1I0BlbJ6+u0D92ej0PND4d958UtZN
 7pUbnp6A5TVSgCd/5Wm9fYlLsv9lTAI=
X-Google-Smtp-Source: ABdhPJzAKZ0VTACBCUnGrT/frh2eF6VEQCuhDFdIA/OGbQGpwufptZXIvxrm7AQ94Ifyzwbi6V5tzA==
X-Received: by 2002:a2e:8041:: with SMTP id p1mr28896508ljg.158.1635279924267; 
 Tue, 26 Oct 2021 13:25:24 -0700 (PDT)
To: make-initrd@lists.altlinux.org
References: <20211024172254.5CD94A5E20@lists.altlinux.org>
 <20211026185838.mnkahrx2v4ja34hf@example.org>
 <203cc85f-b12f-f3aa-1623-c6d958ef8e26@gmail.com>
From: Leonid Krivoshein <klark.devel@gmail.com>
Message-ID: <5331e500-a68a-bb54-9b43-5729df4c69fc@gmail.com>
Date: Tue, 26 Oct 2021 23:25:23 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101
 Thunderbird/60.8.0
MIME-Version: 1.0
In-Reply-To: <203cc85f-b12f-f3aa-1623-c6d958ef8e26@gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: ru
Subject: Re: [make-initrd] [PATCH v6 18/22] bootchain-interactive: initial
 feature
X-BeenThere: make-initrd@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: make-initrd@lists.altlinux.org
List-Id: <make-initrd.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/make-initrd>,
 <mailto:make-initrd-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/make-initrd>
List-Post: <mailto:make-initrd@lists.altlinux.org>
List-Help: <mailto:make-initrd-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/make-initrd>,
 <mailto:make-initrd-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Oct 2021 20:25:27 -0000
Archived-At: <http://lore.altlinux.org/make-initrd/5331e500-a68a-bb54-9b43-5729df4c69fc@gmail.com/>
List-Archive: <http://lore.altlinux.org/make-initrd/>


26.10.2021 22:54, Leonid Krivoshein пишет:
>> $ echo $HOME
>> /home/legion
>> $ text='$HOME'
>> $ eval "v=\"$text\""
>> $ echo $v
>> /home/legion
>> $ eval "v=\"\$text\""
>> $ echo $v
>> $HOME
>
> Да, эту идею я уже понял. Но, может, лучше с set?
>
> $ text="..'; cat /etc/passwd; '.."
> $ eval "v='$x'"
> (уф, не буду показывать)!..
>
> Это я к тому, что разве \" гарантирует невыполнение произвольного кода?
> Я же мог и двойные кавычки использовать вместо одинарных:
>
> $ text="..\"; cat /etc/passwd; \".."
> $ eval "v=\"$x\""
> (уф, тоже не буду показывать)!..

Не, вот так всё нормально:

$ text="..\"; cat /etc/passwd; \".."
$ eval "v=\"\$text\""

Это я ошибся.


-- 
Best regards,
Leonid Krivoshein.