[tahoe-dev] [tahoe-lafs] #166: command line order is problematic

tahoe-lafs trac at allmydata.org
Sat Dec 12 20:48:29 PST 2009


#166: command line order is problematic
-----------------------------------------+----------------------------------
 Reporter:  zandr                        |           Owner:  warner    
     Type:  defect                       |          Status:  assigned  
 Priority:  major                        |       Milestone:  eventually
Component:  code-frontend-cli            |         Version:  0.6.1     
 Keywords:  security usability unix mac  |   Launchpad_bug:            
-----------------------------------------+----------------------------------
Changes (by davidsarah):

  * keywords:  => security usability unix mac
  * priority:  minor => major


Comment:

 Putting options after the verb creates a security hazard on Unix
 platforms: if the user tries to use wildcards to specify multiple local
 files (for {{{tahoe cp}}}, say), then a local filename may begin with
 {{{-}}} and be treated as an argument. If options had to be before the
 verb, that couldn't happen.

 Although this hazard can be worked around either by prefixing each
 wildcard argument with {{{./}}} or (for most commands) using {{{--}}}
 before any filename arguments, it's very easy to forget to do that. Also,
 more users know about the {{{--}}} workaround than {{{./}}}, and Tahoe
 does not currently appear to support {{{--}}}.

 OTOH, requiring {{{tahoe -r cp}}} would look backwards to many users. I
 don't know how to resolve that.

 (Windows doesn't have this problem because the shell doesn't automatically
 glob arguments.)

-- 
Ticket URL: <http://allmydata.org/trac/tahoe/ticket/166#comment:12>
tahoe-lafs <http://allmydata.org>
secure decentralized file storage grid


More information about the tahoe-dev mailing list