Htydjtk

Note: If you googled this by the title of this question, don't use this script unless you know what it is supposed to do.

This is a script in bash 3+ that I have used for long for preventing rm * and rm -rf * from accidentally invoked and removing important files by mistake. I put it in my ~/.bash_aliases.

alias rm='set -f;rm'

rm(){

    if [[ "$-" == *i* ]]

    then

        if [ "$1" = "*" ] || [ "$2" = "*" ] || [ "$1" = "./*" ] || [ "$2" = "./*" ]

        then

            echo "Abort: refusing to remove *, please go to the parent folder and do rm <folder_name>/*" 1>&2

            set +f

            return 1

        fi

    fi  

    set +f

    /bin/rm -i $@

}



set +f

I would like to know whether there are any vulnerabilities and whether it can be improved.

The vulnerability I see is that only the first two arguments are checked. You could check all of them:

rm() { 

    [[ $- == *i* ]] && for arg

    do 

        if [[ $arg = "*" || $arg = "./*" ]]

        then

            # abort

       fi

   done

   # do the rm

This kind of checking will miss other dangerous wildcards like ** or ?*. You can get safer checking by expanding * yourself, then see if the expanded arguments contain that same list of files:

# alias not needed here; we want globs to be expanded

rm() {

    declare -a star=(*)

    declare -a dotslashstar=(./*)

    if [[ "$@" == *"${star[@]}"*  ||  "$@" == *"${dotslashstar[@]}"* ]]

    then

         # abort

... but then you can't (for example) empty a directory full of temp files with rm *.tmp, if *.tmp and * match the same thing.

Double-quote variables used in command parameters

This is a bug:

/bin/rm -i $@

What will happen if you try to delete file a b (with space in the name)?
Most likely this:

rm: a: No such file or directory

rm: b: No such file or directory

Always write "$@" instead of unquoted $@.

Unfortunately, as you pointed out in a comment,
this will cause another problem:
arguments containing globs will be taken literally.
In short, it's difficult to have the cake and eat it too.

You could mitigate the problem by looping over the arguments,
and if you detect a glob, then expand it yourself:

for arg; do

    if [[ $arg == *[*?]* ]]; then

        expanded=($arg)

        echo rm -i "${expanded[@]}"

    else

        echo rm -i "$arg"

    fi

done

This still won't be perfect, because it doesn't handle the case when an argument contains both spaces and globs. A robust solution would take more effort, and not worth doing in Bash. (See this example delegating the hard work to Python.)

Use command to bypass aliases

Don't worry about the absolute path of commands. Use command to bypass aliases:

command rm -i "$@"

Redundant file descriptors

In echo "Abort: ..." 1>&2, the file descriptor 1 is redundant, you can safely omit it.

Preserving the user's environment

This is a minor nitpick.
When the alias is executed, it will do set +f,
regardless of whatever was the original setting in the shell,
which may not be the same.
This is really just a minor nitpick, for the record.
I wouldn't care about this tiny impractical detail either.