News for hackers. Stuff that matters.
Re:Shellfirm: Intercept risky patterns at the command line by creatonez on Sunday July 31, 2022 @03:30AM (#32293924)
Why nitpick the programming language of a project clearly intended to be used by the author?
Re:Shellfirm: Intercept risky patterns at the command line by TekMol on Sunday July 31, 2022 @03:36AM (#32293941)
Because of the indirection and complexity it causes.

The user is in a shell. The simplest way to add something to their system is a shellscript. No moving parts. You get what you see in the script.

The way the project is set up, there are multiple moving parts. The interaction between the shell, some compiler and a bunch of rust files.

Imagine during the moon landing, Neil Armstrong could not have communicated directly with Buzz Aldrin. But they would had to go through a translator who translates English to German. Who passes the message on to a translator who translates it from German to French. Who then passes it on to Buzz. BOOM!

                      +   /\
         +              .'  '.   *
                *      /======\      +
                      ;:.  _   ;
                      |:. (_)  |
                      |:.  _   |
            +         |:. (_)  |          *
                      ;:.      ;
                    .' \:.    / `.
                   / .-'':._.'`-. \
                   |/    /||\    \|
Re:Shellfirm: Intercept risky patterns at the command line by Thiez on Sunday July 31, 2022 @04:20AM (#32294171)
By that reasoning all command line tools must be shell scripts.
Re:Shellfirm: Intercept risky patterns at the command line by pca006132 on Sunday July 31, 2022 @03:45AM (#32293992)
I don't think this tool changes the shell command for you? Your analogy doesn't fit here.

But I do agree that it is probably easier to implement as a shell script.

Re:Shellfirm: Intercept risky patterns at the command line by eladkaplan on Sunday July 31, 2022 @04:37AM (#32294240)
shellfirm not changes the shell command, only get the the command and check the pattern. the shell is execute the command.

You really think shell script will be easier? can you elaborate?