Zsh Mailing List Archive
Messages sorted by: Reverse Date, Date, Thread, Author

Re: BUG: crafting SHELLOPTS and PS4 allows to run arbitrary programs in setuid binaries using system



On Sep 28, 12:37pm, Simon Ruderich wrote:
}
} I think the test should be changed to getuid() != geteuid() or
} similar to trigger only in setuid cases.

Upon consideration, I agree.



Messages sorted by: Reverse Date, Date, Thread, Author