>Casper.Dik at sun.com wrote:
>
>>
>> >    If not used carefully, the system(3C) function may be responsible for
>> >    the following security concerns:
>> >
>> >     + Execution of the command is affected by the PATH, IFS and other
>> >       environment variables.
>>
>> None of our current shells evaluates the IFS environment variable.
>
>The Bourne Shell (bin/sh) does.
>


Not in Solaris; it was fixed before Solaris 7 (bug 4077929)


Casper


Reply via email to