lesspipe regression

[v6ak]

Qubes OS version

R3.2

---

Expected behavior:

In dom0, less displays just the content without preprocessing with complex parsers of attacker's choice.

Actual behavior:

Lesspipe is used, although there is an attempt to disable it.

Steps to reproduce the behavior:

1. Run less on some trusted RPM file (or even on untrusted one if you dare :P), or even a directory.

General notes:

I see the attempt to disable it with /etc/profile.d/zz-disable-lesspipe. Unfortunately, Bash does not process this file, it seems to process just *.sh files there. Just copying the file under right filename helps.

The lesspipe is also defined for csh in profile.d. I am not a csh user and it is unclear how much is it supported in Qubes dom0, but if you want to fix it, it seems we have to use unsetenv instead of unset:

unsetenv LESSOPEN LESSCLOSE

Last but not least, some automated test might be useful. Not sure where it should be added to, but the test itself looks pretty easy, e.g.:

bash -c env | (! grep ^LESS)

Maybe interactive session should be forced there:

(bash <<< env) | (! grep ^LESS)

The same can be applied to csh, just replace "bash" with "csh". The practical issue is that csh is not installed by default.

---

Related issues:

Original issue: #1014

[qubesos-bot]

Automated announcement from builder-github

The package qubes-core-dom0-linux-3.2.14-1.fc23 has been pushed to the r3.2 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update

[qubesos-bot]

Automated announcement from builder-github

The package qubes-core-dom0-linux-3.2.14-1.fc23 has been pushed to the r3.2 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update

[qubesos-bot]

Automated announcement from builder-github

The package qubes-core-dom0-linux-4.0.1-1.fc25 has been pushed to the r4.0 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update

[qubesos-bot]

Automated announcement from builder-github

The package qubes-core-dom0-linux-4.0.1-1.fc25 has been pushed to the r4.0 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update

[qubesos-bot]

Automated announcement from builder-github

The package qubes-core-dom0-linux-3.2.15-1.fc23 has been pushed to the r3.2 stable repository for dom0.
To install this update, please use the standard update command:

sudo qubes-dom0-update

Or update dom0 via Qubes Manager.

Changes included in this update

[qubesos-bot]

Automated announcement from builder-github

The package qubes-core-dom0-linux-3.2.15-1.fc23 has been pushed to the r3.2 stable repository for dom0.
To install this update, please use the standard update command:

sudo qubes-dom0-update

Or update dom0 via Qubes Manager.

Changes included in this update