From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/5307
Path: main.gmane.org!not-for-mail
From: larsi@ifi.uio.no (Lars Magne Ingebrigtsen)
Newsgroups: gmane.emacs.gnus.general
Subject: Re: Deleting concatenation directories
Date: 26 Feb 1996 13:49:32 +0100
Organization: Dept. of Informatics, University of Oslo, Norway
Sender: larsi@ifi.uio.no
Message-ID: <w8spwb2qmjn.fsf@eistla.ifi.uio.no>
References: <w8sivgy7or0.fsf@hler.ifi.uio.no>
	<199602230817.AA24187@fiicmal02.tu-graz.ac.at>
	<m2ag2a7y95.fsf@deanna.miranova.com>
	<sr4tsgq25q.fsf@delphi.ccs.neu.edu>
	<m2pwb4y04s.fsf@deanna.miranova.com>
NNTP-Posting-Host: coloc-standby.netfonds.no
X-Trace: main.gmane.org 1035145930 32432 80.91.224.250 (20 Oct 2002 20:32:10 GMT)
X-Complaints-To: usenet@main.gmane.org
NNTP-Posting-Date: Sun, 20 Oct 2002 20:32:10 +0000 (UTC)
Return-Path: ding-request@ifi.uio.no
Original-Received: from ifi.uio.no (ifi.uio.no [129.240.64.2]) by deanna.miranova.com (8.7.3/8.6.9) with SMTP id FAA00917 for <steve@miranova.com>; Mon, 26 Feb 1996 05:45:56 -0800
Original-Received: from eistla.ifi.uio.no (4867@eistla.ifi.uio.no [129.240.94.29]) by ifi.uio.no with ESMTP (8.6.11/ifi2.4) 
	id <NAA24354@ifi.uio.no> for <ding@ifi.uio.no> ; Mon, 26 Feb 1996 13:49:34 +0100
Original-Received: (from larsi@localhost) by eistla.ifi.uio.no ; Mon, 26 Feb 1996 13:49:33 +0100
Original-To: ding@ifi.uio.no
In-Reply-To: Steven L Baur's message of 24 Feb 1996 11:49:38 -0800
Original-Lines: 14
Xref: main.gmane.org gmane.emacs.gnus.general:5307
X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:5307

Steven L Baur <steve@miranova.com> writes:

> I see some naked-looking calls to sh -c in gnus-uu.  Are precautions
> being taken against filenames like ``fred; rm -rf $HOME''?

Yup.  A file name like that would lead to the command

$ file "fred; rm -rf \$HOME"

which is harmless, I'd'a thunk.

-- 
  "Yes.  The journey through the human heart 
     would have to wait until some other time."