Hola Ignace Mouzannar!
El 01/03/2010 a las 23:42 escribiste:
> Hello Piotr,
>
> On Mon, Mar 1, 2010 at 22:11, Piotr Minkina <likemandr...@o2.pl> wrote:
> > In example I can run "echo $(/bin/sh)" or "echo $(/bin/su)", or every other
> > command.
>
> Thank you for reporting this. You are absolutely right that the
> default configuration of lshell permits this, and it should not.
>
> I have already corrected this bug in the upcoming version of lshell.
>
> A temporary fix would be to add "$" in the forbidden list:
> ---------------8<-----------------------8<---------------
> ## a list of forbidden character or commands
> forbidden : [';', '&', '|','>','<', '$']
> ---------------8<-----------------------8<---------------
>
> I am working on getting the new version out very soon.
Please, ping me when it's ready so I can check it, and upload it.
--
"La duración de un minuto depende de que lado del baño estés."
-- Ley de la Relatividad (Burke)
Saludos /\/\ /\ >< `/
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
