HomeFreeBSD

pw: do not call system()

Description

pw: do not call system()

Calling system makes pw(8) spawn a shell, which can then be abused.

MFC After: 3 days

(cherry picked from commit ef7d0eb9489f39169a1ae83c576fe74e40d126ad)

Details

Provenance
baptAuthored on May 15 2023, 6:55 AM
Parents
rG0edfc2a92c80: sh(1): fix history file write checking
Branches
Unknown
Tags
Unknown