tags 572144 + pending thanks On Tue, Mar 2, 2010 at 13:08, Maximiliano Curia <m...@debian.org> wrote: > Hola Ignace Mouzannar!
Bonjour Maximiliano, > El 01/03/2010 a las 23:42 escribiste: >> Hello Piotr, >> >> On Mon, Mar 1, 2010 at 22:11, Piotr Minkina <likemandr...@o2.pl> wrote: >> > In example I can run "echo $(/bin/sh)" or "echo $(/bin/su)", or every >> > other command. >> >> Thank you for reporting this. You are absolutely right that the >> default configuration of lshell permits this, and it should not. >> >> I have already corrected this bug in the upcoming version of lshell. >> >> A temporary fix would be to add "$" in the forbidden list: >> ---------------8<-----------------------8<--------------- >> ## a list of forbidden character or commands >> forbidden : [';', '&', '|','>','<', '$'] >> ---------------8<-----------------------8<--------------- >> >> I am working on getting the new version out very soon. > > Please, ping me when it's ready so I can check it, and upload it. I have just uploaded the new version of lshell (0.9.9) on m.d.n [1]. Thank you for your time and support. Ignace M [1] The package can be found on mentors.debian.net: - URL: http://mentors.debian.net/debian/pool/main/l/lshell - Source repository: deb-src http://mentors.debian.net/debian unstable main contrib non-free - dget http://mentors.debian.net/debian/pool/main/l/lshell/lshell_0.9.9-1.dsc -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
