[ILUG] love this feature

[Andrew Court]

To be honest I am not sure I would like my system automatically installing
programs for me. Surely there would be a massive security issue. Whats to
stop someone uploading a backdoor onto some common repositories using the
name of an oft-mistyped command, and the system automatically downloading it
and running it. Next thing you know your part of a botnet.

I know to exploit this issue you would have to get over the hurdle of
getting your backdoor onto the repository which is not very easy, but it is
doable.

At the end of the day its only one command to install the program.

On Tue, Jan 26, 2010 at 5:15 PM, Philip Reynolds
<philip.reynolds at gmail.com>wrote:

> On Tue, Jan 26, 2010 at 2:05 PM, Kae Verens <kae at verens.com> wrote:
> > /me hates it.
> >
> > every time I mis-type something, I then have to cancel the stupid thing,
> > which starts trying to install my mis-typed command.
> >
> > also, if you do it as a non-root user, it goes, downloads the needed
> files,
> > then totally fails to ask for root permissions to install it.
>
> If you're using bash, it's more than likely hooking into
> command_not_found_handle
>
> $ sl
> The program 'sl' is currently not installed.  You can install it by typing:
> sudo apt-get install sl
> sl: command not found
> $ unset -f command_not_found_handle
> $ sl
> bash: sl: command not found
>
> Phil.
> --
> Irish Linux Users' Group mailing list
> About this list : http://mail.linux.ie/mailman/listinfo/ilug
> Who we are : http://www.linux.ie/
> Where we are : http://www.linux.ie/map/
>