[ale] Exploiting wildcards on Linux

[agcarver+ale at acarver.net (Alex Carver)]

On 2014-06-29 11:55, Boris Borisov wrote:
> http://www.net-security.org/article.php?id=2061
> 

Seems strange to not mention using -- at the end of the tar command:

tar cf archive.tar -- *

Command line argument parsing is terminated forcefully and all
subsequent arguments are assumed to be files.  No "workaround" needed
(using ./* does weird things to the stored directory tree by appending
./ to everything -- that could potentially be bad during a restore)