News for hackers. Stuff that matters.
Re:Pure Bash Web Server by jonhohle on Friday February 16, 2024 @10:06AM (#39397999)
Python needs an ld.so and libc (minimally) but not a shell or other external utilities. Shebang scripts are loaded by ld.so, not the shell.
Re:Pure Bash Web Server by khrbtxyz on Friday February 16, 2024 @10:22AM (#39398219)
Shebang scripts are supported directly by the kernel via the exec family of system calls, so ld.so shouldn't be involved.

https://github.com/torvalds/linux/blob/master/fs/Kconfig.bin...

  config BINFMT_SCRIPT
 tristate "Kernel support for scripts starting with #!"
 default y
 help
   Say Y here if you want to execute interpreted scripts starting with
   #! followed by the path to an interpreter.
Re:Pure Bash Web Server by usr1106 on Friday February 16, 2024 @11:37AM (#39399329)
Python with batteries included, doesn't that mean exploit tools included?

No personal attack intended, I am wondering this about my own embedded product which contains Python.

Re:Pure Bash Web Server by thecodedmessage on Friday February 16, 2024 @11:05AM (#39398818)
Yeah, I remember reading the code in the kernel that handles shebang a long time ago. ld.so is not involved.