On 2018-04-08 09:04 AM, Robert P. J. Day wrote:
>   i would have been shocked if that construct had that obvious a
> security hole, given how often i've seen it in shell scripts.

LOL remember shellshock?

    env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

Unfortunately I don't have a vulnerable system to test on, but I'm willing to 
be that's what it's guarding against.

Stephen M. Webb  <stephen.w...@bregmasoft.ca>
Linux mailing list

Reply via email to