Hi,

I stumbled on this:

$ systemctl cat cron-crontab-pi-0 | grep Environment
Environment="A=a a" "[email protected]" "B=b b" "C=c c"
$ systemctl show cron-crontab-pi-0 -p Environment
Environment=A=a a [email protected] B=b b C=c c

-> the quotes are gone.

Is this done by design, or a bug in "systemctl show" ?

My simple parser could be abused if someone hid a MAILTO= inside an other env 
variable.
https://github.com/systemd-cron/systemd-cron/blob/master/src/bin/mail_on_failure

Here this won't hurt, but this may causes security problems elsewhere.

Alexandre Detiste
_______________________________________________
systemd-devel mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to