32 points

The theme contained rm -rf, but claims it wasn’t malicious intent…I assume rm -rf for cleanup, but seems like it should have a apecific path other than /

permalink
report
reply
6 points

Was it a native theme or a downloaded/custom theme?

permalink
report
parent
reply
8 points

Downloaded from the KDE store

permalink
report
parent
reply
4 points

Thank you. I couldn’t get google translate to work for me.

permalink
report
parent
reply
1 point

Custom download

permalink
report
parent
reply
44 points
*

The command was rm -rf $pathvariable

Bug in the code caused the path to be root. Wasn’t explicitly malicious

permalink
report
parent
reply
19 points

Don’t most distros have safeguards against this? I tried sudo rm -rf / in an Ubuntu VM that I was about to delete just to see what happened, and it gave me a warning. I had to add some other option to bypass the warning.

permalink
report
parent
reply
9 points

Yes,

rm -rf --allow-unsafe

Or something is required

permalink
report
parent
reply
14 points

it apparently was defaulting to the home dir, not /

permalink
report
parent
reply
21 points

When I worked at Pixar long ago an intern had a cron job that was intended to clean up his nightly build and ended up deleting everything on the network share for everyone!

Fortunately there were back-ups and it was fine, but that day was really hilariously annoying while they tracked down things disappearing.

permalink
report
parent
reply
8 points

Was that the infamous Toy Story 2 incident?

permalink
report
parent
reply
14 points
*

Amusingly enough, no.

This was after Toy Story 3 released but before Brave.

permalink
report
parent
reply
2 points

Oof

permalink
report
parent
reply
1 point

Trust but verify. It was a text file, it doesn’t get much easier to do the second step of that.

permalink
report
reply
12 points

… in which case you would have seen that they delete a path referenced by an env var being set earlier.

How likely do you think it would have been to notice, that this env var will turn up empty in your specific case?

permalink
report
parent
reply
0 points

A theme that deleted anything would have been enough of a red flag.

permalink
report
parent
reply
63 points
*

rm -rf ${var}/ is a disaster waiting to happen.

Always do rm -rf "${var:?}/" so that the script aborts if the variable is empty. Or better yet rm -rf "./${var:?}/".

Edited to add quotes. Always quote a path: it might have spaces in it, without quotes that will become multiple paths! Which would also have avoided the particular bug in question.

permalink
report
reply
18 points

Is there not also a way to disallow empty variables in the script, I think it is set -u? Then you don’t have to keep thinking “should I add a :? here because if empty it may lead to disaster” all the time. Might be even safer.

permalink
report
parent
reply
27 points

set -euo pipefail at the top of every script makes stuff a lot safer. Explanation here.

permalink
report
parent
reply
8 points

Yep! I always do this too.

TL;DR: e aborts the whole script on a non-zero error. u aborts when using an undefined variable. -o pipefail aborts a piped compound command when one of the piped commands fail.

Any other way lies madness. Or erasing the whole filesystem apparently!

permalink
report
parent
reply
7 points
*

Yes! But -u is for undefined variables. It won’t stop a defined variable with an empty value. E.g foo="".

Also ? and :? have the advantage of telling you right then and there where the variable use is that it must be defined or not empty… having to trek back to (likely) the top of the script to check is easily forgotten.

permalink
report
parent
reply
10 points

In this case the issue was that a change between kde5 and kde6 let to the variable being defined as somepath / (notice the space).

permalink
report
parent
reply
13 points

And that’s why you also surround it with double quotes.

permalink
report
parent
reply
3 points

I usually have a whole block that checks if the var exists and exits if not, but this is way more elegant

permalink
report
parent
reply
2 points

Protects you from accidentally changing the variable within the block too!

permalink
report
parent
reply
15 points

Reminds me of a script a colleague has where it would sometimes accidentally wipe the entire production folder on a server. I pointed out the risk in his script and explained how to correct it like 2 years ago, give or take. He said he did, but then last week it happened again because apparently he had several scripts like that and only corrected one.

You can lead a horse to water, but you can’t force it to drink.

permalink
report
parent
reply
3 points

SIDPlay did something similar on the Mac.

It has the neat built-in feature of rsyncing the high voltage SID collection to your computer.

However, if you deleted your local copy of it and tried to re-sync it’d update (with deletes) against / instead. Bye bye files.

permalink
report
reply
5 points

I wonder what the sudo rm -rf equivalent for windows is

permalink
report
reply
33 points

Microsoft thinks it’s uninstalling Edge.

permalink
report
parent
reply
2 points

That’s all you really need to do to break windows. /s

Edge/Internet Explorer is/were a cornerstone of any Windows install. Uninstall that and you can get all kinds of weird issues on your system.

permalink
report
parent
reply
2 points
*

Like my auto-installed Copilot doesn’t launch?

Oh no!

For some context, I’ve got a Windows install that I primarily keep around for VR gaming which I remove Edge from. That Copilot thing is the only “issue” I’ve noticed.

permalink
report
parent
reply
8 points

Windows doesn’t have sudo (not yet, at least) and privileges work a bit different as even as an administrator, you may not have full rights.

To overcome that obstacle, you’d need to run a shell as an administrator (hold CTRL+Shift, then use the start menu entry or right-click it and select run as administrator).

Next obstacle: We have a separate drive for each partition, but no root folder.

If we assume we’re running on a laptop or PC with a single drive and a single partition*, then it’s just

In cmd.exe:

del /F /S C:\

In Powershell:

Remove-Item -Recurse -Force -Path C:\

When you want to delete all (mounted) partitions/drives, you need to iterate over them. (Note that’s from the top of my head, didn’t check the script if it works).

In cmd.exe:

REM Not gonna do that, I'm no masochist

In Powershell:

Get-PSDrive -PSProvider FileSystem | Foreach-Object {
    Remove-Item -Recurse -Force -Path "$($_.Name):\"
}

Done. Mounting additional partitions before that is left as an exercise for the reader.

*note that even a standard installation of windows creates 3 partitions. One for the bootloader, one for the recovery system and then the system drive. Only the latter is mounted and will be deleted by this. The other two will still be intact.

permalink
report
parent
reply

Linux

!linux@lemmy.ml

Create post

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

  • Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
  • No misinformation
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

Community stats

  • 8.1K

    Monthly active users

  • 6.4K

    Posts

  • 174K

    Comments