Zsh Mailing List Archive
Messages sorted by: Reverse Date, Date, Thread, Author

Re: Zsh - Multiple DoS Vulnerabilities

On Tue, May 14, 2019 at 2:39 PM Daniel Shahaf <d.s@xxxxxxxxxxxxxxxxxx> wrote:
>
> I've been trying to come up with counterexamples.  What if somebody
> installed a /etc/zshenv that does, say, 'disable zmodload enable'?

You can bypass /etc/zshenv by, for example, invoking zsh as "sh" and
then running "emulate -R" and/or otherwise futzing with setopts.  So
either THAT is a security flaw, or your example isn't one either.
Messages sorted by: Reverse Date, Date, Thread, Author