[Bug 3142] ProxyCommand should be interpreted by a fixed shell like /bin/sh .

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=3142

--- Comment #6 from Darren Tucker <dtucker at dtucker.net> ---
(In reply to Tetsuo Handa from comment #5)
> But my program (which is called as Apache CGI) does allow setting
> $SHELL.

That's great, because it means you have a way to make it work when you
want it to work.

Making the change you're asking for would mean that in other situations
it would work *when it's not supposed to work* which is a security
problem.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.