Hi,

I stumbled on this:

$ systemctl cat cron-crontab-pi-0 | grep Environment
Environment="A=a a" "MAILTO=system-c...@mailinator.com" "B=b b" "C=c c"
$ systemctl show cron-crontab-pi-0 -p Environment
Environment=A=a a MAILTO=system-c...@mailinator.com B=b b C=c c

-> the quotes are gone.

Is this done by design, or a bug in "systemctl show" ?

My simple parser could be abused if someone hid a MAILTO= inside an other env 
variable.
https://github.com/systemd-cron/systemd-cron/blob/master/src/bin/mail_on_failure

Here this won't hurt, but this may causes security problems elsewhere.

Alexandre Detiste
_______________________________________________
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to