Some more digging revealed the following: http://www.opengroup.org/onlinepubs/009695399/functions/popen.html
The *popen*() function should not be used by programs that have set user (or group) ID privileges. The *fork*()<http://www.opengroup.org/onlinepubs/009695399/functions/fork.html>and *exec <http://www.opengroup.org/onlinepubs/009695399/functions/exec.html>*family of functions (except *execlp*()<http://www.opengroup.org/onlinepubs/009695399/functions/execlp.html>and *execvp*()<http://www.opengroup.org/onlinepubs/009695399/functions/execvp.html>), should be used instead. This prevents any unforeseen manipulation of the environment of the user that could cause execution of commands not anticipated by the calling program. Axton Grams On Feb 1, 2008 1:56 AM, William H. Will Du Chene <[EMAIL PROTECTED]> wrote: > Why not circumvent the entire issue, and use "popen" and the existing ping > binary? It's in stdio.h. > > That would eliminate the need for a shell script wrapper, allow for the > development of a plugin within C, and make use of the existing ping binary > which has already been designed to do the job... Best part - no root-ski > required. > > -- > > Will Du Chene > [EMAIL PROTECTED] > http://www.myspace.com/wduchene > > > _______________________________________________________________________________ > UNSUBSCRIBE or access ARSlist Archives at www.arslist.org > Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
