Alan Coopersmith <Alan.Coopersmith at Sun.COM> wrote:

> (Sorry, but system() always strikes me as lazy and inefficient
>  programming.)

system() opens a security hole unless you call it with sane values 
of the environment variables PATH= and IFS=


> If you must use system(), you must specify the path to chmod to
> avoid getting the /usr/gnu/bin version on Indiana, which doesn't
> do ZFS ACL's ( http://defect.opensolaris.org/bz/show_bug.cgi?id=947 ).

This must be done even if you call exec*() directly.

J?rg

-- 
 EMail:joerg at schily.isdn.cs.tu-berlin.de (home) J?rg Schilling D-13353 Berlin
       js at cs.tu-berlin.de                (uni)  
       schilling at fokus.fraunhofer.de     (work) Blog: 
http://schily.blogspot.com/
 URL:  http://cdrecord.berlios.de/private/ ftp://ftp.berlios.de/pub/schily

Reply via email to