[Bug 1762] Improve the documentation w.r.t. "the user's shell"
bugzilla-daemon at bugzilla.mindrot.org
bugzilla-daemon at bugzilla.mindrot.org
Mon Jun 26 21:39:21 AEST 2017
https://bugzilla.mindrot.org/show_bug.cgi?id=1762
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |djm at mindrot.org
Resolution|--- |WONTFIX
Status|NEW |RESOLVED
--- Comment #3 from Damien Miller <djm at mindrot.org> ---
re comment #1: I don't think this needs documentation, since it's a)
pretty standard behaviour for user programs to use $SHELL where
available (e.g. in ssh). BTW, the ENVIRONMENT section is for variables
that are set when logging in, not variables that ssh uses internally so
even if we did document it
re comment #3: ITerm2 is clearly doing the wrong thing here. If it's
passing stuff from an untrusted source (e.g. the web) to a shell
program, then it's ITerm2's job to ensure that it's appropriately
sanitised first.
--
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
More information about the openssh-bugs
mailing list