bug-bash
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: security problem in restricted shell?


From: Chet Ramey
Subject: Re: security problem in restricted shell?
Date: Tue, 10 Jul 2001 13:10:53 -0400

> I think I found a serious security problem in bash's implementation of a
> restricted shell, when combined with badly written scripts in the allowed
> PATH. I include a suggested interim workaround for people affected by this
> hole, and a fix to bash to get rid of this hole.

The one-line fix I made is to not put exported function definitions in the
export environment if the shell is restricted.

Chet

-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
( ``Discere est Dolere'' -- chet)

Chet Ramey, CWRU    address@hidden    http://cnswww.cns.cwru.edu/~chet/



reply via email to

[Prev in Thread] Current Thread [Next in Thread]