On 25-9-2012 18:48, Paul Gilmartin wrote:
> On Sep 25, 2012, at 10:28, bd@xxxxxxxxx wrote:
>>> eval $DAEMON $ARGS should work.
>> That did it, thank you.
> ... but always beware of "eval" if you don't absolutely
> control the argument string. A single semicolon and
> someone owns your process.
For a configuration file that gets sourced, the person creating the
configuration file already owns the process, so there is no added
security by avoiding eval here.
--
To unsubscribe from this list: send the line "unsubscribe dash" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
