On 12/3/06, Bob Proulx <[EMAIL PROTECTED]> wrote:
James Youngman wrote:
> While "-exec sh ..."  would change this behaviour, don't do that as it is
> very insecure.

Insecure?  In what way?

I envision something like this:

  find . -name "foo*" -exec sh -c "file {} >{}.tmp" \;
[...]
What problem should I be aware of in the above?

touch '/tmp/foo; echo foo: empty; rm -rf $HOME'

James.


_______________________________________________
Bug-findutils mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/bug-findutils

Reply via email to