On 2018-04-08 09:04 AM, Robert P. J. Day wrote:
> i would have been shocked if that construct had that obvious a
> security hole, given how often i've seen it in shell scripts.
LOL remember shellshock?
env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
Unfortunately I don't have a vulnerable system to test on, but I'm willing to
be that's what it's guarding against.
--
Stephen M. Webb <stephen.w...@bregmasoft.ca>
_______________________________________________
Linux mailing list
Linux@lists.oclug.on.ca
http://oclug.on.ca/mailman/listinfo/linux
