On 2018-04-08 09:04 AM, Robert P. J. Day wrote:
> i would have been shocked if that construct had that obvious a
> security hole, given how often i've seen it in shell scripts.
LOL remember shellshock?
env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
Unfortunately I don't have a vulnerable system to test on, but I'm willing to be that's what it's guarding against.
--
Stephen M. Webb <stephen [ dot ] webb [ at ] bregmasoft [ dot ] ca>