[Bug 2283] option to execute command without shell

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Mon Oct 22 20:01:46 AEDT 2018


https://bugzilla.mindrot.org/show_bug.cgi?id=2283

--- Comment #8 from Darren Tucker <dtucker at dtucker.net> ---
(In reply to Colin Watson from comment #6)
> (Unix servers could use execvp; Windows servers would
> have to do their own quoting such that a call to CommandLineToArgvW
> in the subprocess will do the right thing, or something along those
> lines.)

One thing you'd need to be careful of is that the user's shell is
sometimes used as an access control method (rbash, nologin or even just
/bin/true) so bypassing it and going straight to excevp could prove
quite the surprise.

Also:
> Essentially every modern programming language

Despite the featuritis in Match, OpenSSH is not a programming language
:-)

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list