the new controlchan (+gpgverify)

Russ Allbery rra at
Thu Feb 8 06:15:39 UTC 2001

greg andruk <supersede at> writes:

> Sorry, I explained that poorly.  It's the `open F, ...' in the
> convoluted eval substitute that elicits the insecure $ENV{PATH}
> screaming, and I'm not sure if it's a good idea for innshellvars to be
> mucking with the path behind the back of the calling script to get
> around it.

innshellvars actually already sets PATH; it just does it as the last thing
it does.  So if we moved that in front of the magic eval stuff, that
should work.

Russ Allbery (rra at             <>

More information about the inn-workers mailing list