Re: Taint marker for set -r

Chet Ramey <[email protected]> writes:

> On 8/23/26 6:27 PM, Sam James wrote:
>> Hi,
>> I'm looking into use of rbash/set -r for sourcing and extracting
>> values
>> from a script (*). For my usecase, a Bash loadable plugin works for
>> allowing `source` in such an environment for a limited subset of paths.
>> I'd like to detect any operation which was denied by `set -r`, but I
>> don't want to impose `set -e` semantics as it'd be excessive and break
>> some of the scripts I need to source (which I can't modify for this).
>> Could any denied operation by way of set -r set some read-only
>> variable
>> that I can fetch after sourcing?
>
> I wonder if this would be better suited for a new trap.

Ah, that's a better idea indeed and would work well.

-----BEGIN PGP SIGNATURE-----

iQEBBAEWCgCpFiEEJaa7iN2bdkxrVUHCc4QJ9SDfkZAFAmqNhbkbFIAAAAAABAAO
bWFudTIsMi41KzEuMTIsMiwyXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25z
Lm9wZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQyNUE2QkI4OEREOUI3NjRDNkI1NTQx
QzI3Mzg0MDlGNTIwREY5MTkwDxxzYW1AZ2VudG9vLm9yZwAKCRBzhAn1IN+RkKma
AP9KCKrTiDHxV6W1bM/qRQfaI4j9+9OaT0oHB/ZFUxz/jgEAlBvJKZjZjWXvToMT
THad3gat0UvXcs25P372oeczXgc=
=wBkC
-----END PGP SIGNATURE-----