> newer code in the future may introduce unsafe
> usages of system(3C) and those could be easily fixed via exec_system()
> instead of a more elaborate fork()/exec()/waitpid() way.

There's nothing elaborate about using fork()/exec(). Simply replacing the 
existing occurences of system() with calls exec*() will take far less 
effort than proposing a gratuitously incompatible interface that exhibits 
the same security flaws as the function it proposes to replace.

--lyndon

Reply via email to