From owner-freebsd-security@FreeBSD.ORG Mon Jul 10 17:51:08 2006 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EAA2416A4DD; Mon, 10 Jul 2006 17:51:08 +0000 (UTC) (envelope-from b.candler@pobox.com) Received: from proof.pobox.com (proof.pobox.com [207.106.133.28]) by mx1.FreeBSD.org (Postfix) with ESMTP id 87CD443D46; Mon, 10 Jul 2006 17:51:08 +0000 (GMT) (envelope-from b.candler@pobox.com) Received: from proof (localhost [127.0.0.1]) by proof.pobox.com (Postfix) with ESMTP id 6571D23937; Mon, 10 Jul 2006 13:51:07 -0400 (EDT) Received: from mappit.local.linnet.org (212-74-113-67.static.dsl.as9105.com [212.74.113.67]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by proof.sasl.smtp.pobox.com (Postfix) with ESMTP id D905D61F46; Mon, 10 Jul 2006 13:51:00 -0400 (EDT) Received: from brian by mappit.local.linnet.org with local (Exim 4.61 (FreeBSD)) (envelope-from ) id 1FzzuN-0000cO-1F; Mon, 10 Jul 2006 18:50:59 +0100 Date: Mon, 10 Jul 2006 18:50:59 +0100 From: Brian Candler To: Mikhail Teterin Message-ID: <20060710175059.GA2325@uk.tiscali.com> References: <200607072030.01999.mi+mx@aldan.algebra.com> <44B25F0A.5040709@iang.org> <20060710141729.GF1101@zaphod.nitro.dk> <200607101147.34530@aldan> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200607101147.34530@aldan> User-Agent: Mutt/1.4.2.1i X-Mailman-Approved-At: Tue, 11 Jul 2006 03:04:43 +0000 Cc: Mikhail Teterin , "Simon L. Nielsen" , freebsd-security@freebsd.org, net@freebsd.org, imp@freebsd.org, Iang Subject: Re: strange limitation on rcmd() X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jul 2006 17:51:09 -0000 On Mon, Jul 10, 2006 at 11:47:33AM -0400, Mikhail Teterin wrote: > What I remain upset about, though, is that the rcmdsh(), which is used by > rcmd() ignores the fd2p parameter making it impossible to capture the > remote's stderr... Well, it's probably worth send-pr'ing it. I'd first test whether rsh itself forwards stderr properly. Maybe there's some underlying reason why rcmdsh doesn't have an fd2p argument.