]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
pw: do not call system()
authorBaptiste Daroussin <bapt@FreeBSD.org>
Mon, 15 May 2023 06:55:08 +0000 (08:55 +0200)
committerBaptiste Daroussin <bapt@FreeBSD.org>
Fri, 19 May 2023 08:08:15 +0000 (10:08 +0200)
commitc1150a63791d98598395dfaf8cd880cd3173194b
tree266d68440738fd312597bf371ff8701b8cd34a1f
parent0edfc2a92c80650c2b9ea8d8572752d0a1e6e8eb
pw: do not call system()

Calling system makes pw(8) spawn a shell, which can then be abused.

MFC After: 3 days

(cherry picked from commit ef7d0eb9489f39169a1ae83c576fe74e40d126ad)
usr.sbin/pw/pw_user.c