On Thursday, February 08, 2001 11:43:27 -0600, "Neulinger, Nathan R." 
<[EMAIL PROTECTED]> wrote:
+-----
| >         $vol = `fs lsmount $name`;
|
| I hope you don't plan on running that script with a user that has any
| privileges as you've got a gaping security hole right there.
+--->8

Of late I've become quite a fan of quotemeta for this purpose:

        $vol = `/usr/afsws/bin/fs lsm \Q$name`;

It's overkill but it works.

-- 
brandon s. allbery     [os/2][linux][solaris][japh]   [EMAIL PROTECTED]
system administrator        [WAY too many hats]         [EMAIL PROTECTED]
electrical and computer engineering                                   KF8NH
carnegie mellon university     ["better check the oblivious first" -ke6sls]

Reply via email to