Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

tcl security

18 views
Skip to first unread message

debaser

unread,
Jul 24, 2006, 3:00:32 PM7/24/06
to
Hi. I want to use tcl's expect tool to automate some interactive unix
processes on my system. However, the powers that be where I work will
not allow tcl to be installed because it is open source and there is
some fear of security and instability with open source products here.
Can anyone point to any cases or books that I might use to build an
argument for getting tcl installed here? thanks

Robert Hicks

unread,
Jul 24, 2006, 3:06:59 PM7/24/06
to

Just curious...what do the powers that be want you to use instead?

:Robert

debaser

unread,
Jul 24, 2006, 3:12:35 PM7/24/06
to
They suggest that these Unix processes, such as automatically changing
user passwords on several servers, can be accomplished by unix
script.. I have tried this, but have had much difficulty calibrating
the 'delay' command to the interactive prompts of 'passwd'.

Robert Hicks

unread,
Jul 24, 2006, 3:16:57 PM7/24/06
to

So they think a Unix shell script is more *secure* than a Tcl script?
Yipes!

Jeff Godfrey

unread,
Jul 24, 2006, 3:29:04 PM7/24/06
to

"debaser" <gbr...@gmail.com> wrote in message
news:1153767632.0...@h48g2000cwc.googlegroups.com...

So, don't install Tcl. Run your Tcl script against a TclKit or, go
all the way and just create a stand-alone StarPack. No Tcl
installation required... Would that be acceptable to "the powers that
be"?

Jeff


Glenn Jackman

unread,
Jul 24, 2006, 4:02:33 PM7/24/06
to
At 2006-07-24 03:12PM, debaser <gbr...@gmail.com> wrote:
> Robert Hicks wrote:
> > debaser wrote:
> > > Hi. I want to use tcl's expect tool to automate some interactive unix
> > > processes on my system. However, the powers that be where I work will
> > > not allow tcl to be installed because it is open source and there is
> > > some fear of security and instability with open source products here.
> > > Can anyone point to any cases or books that I might use to build an
> > > argument for getting tcl installed here? thanks
> >
> > Just curious...what do the powers that be want you to use instead?
>
> They suggest that these Unix processes, such as automatically changing
> user passwords on several servers, can be accomplished by unix
> script.. I have tried this, but have had much difficulty calibrating
> the 'delay' command to the interactive prompts of 'passwd'.

Tell your bosses that Expect has long been considered a "unix power
tool": http://www.oreilly.com/catalog/upt3/

See also http://wiki.tcl.tk/expect

A discussion of why you need expect to automate password changes here:
http://www-128.ibm.com/developerworks/library/l-sc1/?n-l-4112

If they're worried about open source, they can get a support contract
with ActiveState

--
Glenn Jackman
Ulterior Designer

Cameron Laird

unread,
Jul 24, 2006, 3:25:48 PM7/24/06
to
In article <1153767632.0...@h48g2000cwc.googlegroups.com>,

ActiveTcl <URL: http://www.activestate.com/Products/ActiveTcl/ >
is a proprietary, quality-assured product based on Tcl which,
along with much else, includes all the latest Expect functionality.
If I correctly understand your situation, ActiveTcl is a complete
solution.

Gerald W. Lester

unread,
Jul 24, 2006, 6:59:17 PM7/24/06
to

They do realize that almost all of the Unix shells are also open source --
don't they?

--
+--------------------------------+---------------------------------------+
| Gerald W. Lester |
|"The man who fights for his ideals is the man who is alive." - Cervantes|
+------------------------------------------------------------------------+

Robert Heller

unread,
Jul 24, 2006, 7:17:10 PM7/24/06
to
At Mon, 24 Jul 2006 17:59:17 -0500 "Gerald W. Lester" <Gerald...@cox.net> wrote:

>
> debaser wrote:
> > They suggest that these Unix processes, such as automatically changing
> > user passwords on several servers, can be accomplished by unix
> > script.. I have tried this, but have had much difficulty calibrating
> > the 'delay' command to the interactive prompts of 'passwd'.
> >
> > Robert Hicks wrote:
> >> debaser wrote:
> >>> Hi. I want to use tcl's expect tool to automate some interactive unix
> >>> processes on my system. However, the powers that be where I work will
> >>> not allow tcl to be installed because it is open source and there is
> >>> some fear of security and instability with open source products here.
> >>> Can anyone point to any cases or books that I might use to build an
> >>> argument for getting tcl installed here? thanks
> >> Just curious...what do the powers that be want you to use instead?
> >>
> >> :Robert
> >
>
> They do realize that almost all of the Unix shells are also open source --
> don't they?

Pretty much all (major) current releases of 'UNIX' are open source at this
point. (This include Solaris!). The only fully closed source operating
system is MS-Windows, which in fact has the *worst* track record in
terms of 'security and stability' (it is the most INsecure and the most
UNstable).

>

--
Robert Heller -- 978-544-6933
Deepwoods Software -- Linux Installation and Administration
http://www.deepsoft.com/ -- Web Hosting, with CGI and Database
hel...@deepsoft.com -- Contract Programming: C/C++, Tcl/Tk

marc spitzer

unread,
Jul 24, 2006, 8:54:44 PM7/24/06
to
On 2006-07-24, Gerald W. Lester <Gerald...@cox.net> wrote:
> debaser wrote:
>> They suggest that these Unix processes, such as automatically changing
>> user passwords on several servers, can be accomplished by unix
>> script.. I have tried this, but have had much difficulty calibrating
>> the 'delay' command to the interactive prompts of 'passwd'.
>>
>> Robert Hicks wrote:
>>> debaser wrote:
>>>> Hi. I want to use tcl's expect tool to automate some interactive unix
>>>> processes on my system. However, the powers that be where I work will
>>>> not allow tcl to be installed because it is open source and there is
>>>> some fear of security and instability with open source products here.
>>>> Can anyone point to any cases or books that I might use to build an
>>>> argument for getting tcl installed here? thanks
>>> Just curious...what do the powers that be want you to use instead?
>>>
>>> :Robert
>>
>
> They do realize that almost all of the Unix shells are also open source --
> don't they?
>


Do you use solaris? http://www.opensolaris.org

marc


--
ms4...@sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org

Ralf Fassel

unread,
Jul 25, 2006, 3:44:20 AM7/25/06
to
* "debaser" <gbr...@gmail.com>

| I have tried this, but have had much difficulty calibrating the
| 'delay' command to the interactive prompts of 'passwd'.

If you're changing passwords via interactive use of 'passwd': on many
systems there are better ways to accomplish this.
Linux has 'usermod -p', other systems will have something similar.

R'

0 new messages