tcp-environ and tcpsvd
"George Georgalis" <[email protected]>
| Newsgroups | gmane.comp.misc.pape.general |
|---|---|
| Message-ID | <[email protected]> |
A few moments after I committed a 'echo $TCPREMOTEHOST' in a tcpsvd program, I realized, ptr records could invoke shell commands... To confirm the hunch I checked tcpsvd(8) which refers to tcp-environ(5); but I don't have ucspi-tcp on that host nor tcp-environ(5). should tcp-environ(5) be incorporated into tcpsvd(8)? should TCPLOCALHOST, TCPREMOTEHOS, and TCPREMOTEINFO be purged of shell command substitution characters, eg `backticks` and $(command)? or should that be handled by programs using the variables? // George -- George Georgalis, systems architect, administrator <IXOYE>< http://galis.org/ cell:646-331-2027 mailto:[email protected]