3 ms·
It seems like the current patch might not be a complete fix: http://seclists.org/oss-sec/2014/q3/671 http://seclists.org/oss-sec/2014/q3/671
by AntiRush 12y ago
It seems like the current patch might not be a complete fix:
http://seclists.org/oss-sec/2014/q3/671 http://seclists.org/oss-sec/2014/q3/671
- fl0wenol 12y agoI think the default in bash should be to never execute the contents of environment variables (like the restricted shell mode allows). Does anyone know why it allows you to pass in shell functions this way? Does anything use it?