Beware xargs security holes

Kim Christian Madsen kimcm at diku.dk
Thu Nov 1 10:31:24 AEST 1990


Just my $0.02 to the ongoing discussion of:

	find .... | xargs rm

If you're really worried about *NASTY* users and embedded newlines in files,
why use xargs at the receiving end of find, and not just settle with:

	find .... -exec /bin/rm {} \;

Yes I know that it spawns a lot of processes compared to the xargs solution,
but it is also a secure way of removal of files with embedded newlines.

					Kim Chr. Madsen



More information about the Comp.unix.shell mailing list