Beware xargs security holes
Kim Christian Madsen
kimcm at diku.dk
Thu Nov 1 10:31:24 AEST 1990
Just my $0.02 to the ongoing discussion of:
find .... | xargs rm
If you're really worried about *NASTY* users and embedded newlines in files,
why use xargs at the receiving end of find, and not just settle with:
find .... -exec /bin/rm {} \;
Yes I know that it spawns a lot of processes compared to the xargs solution,
but it is also a secure way of removal of files with embedded newlines.
Kim Chr. Madsen
More information about the Comp.unix.shell
mailing list