openssh bugs - Jun 2017 - [Bug 1762] Improve the documentation w.r.t. "the user's shell"

https://bugzilla.mindrot.org/show_bug.cgi?id=1762

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
         Resolution|---                         |WONTFIX
             Status|NEW                         |RESOLVED

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
re comment #1: I don't think this needs documentation, since it's a)
pretty standard behaviour for user programs to use $SHELL where
available (e.g. in ssh). BTW, the ENVIRONMENT section is for variables
that are set when logging in, not variables that ssh uses internally so
even if we did document it

re comment #3: ITerm2 is clearly doing the wrong thing here. If it's
passing stuff from an untrusted source (e.g. the web) to a shell
program, then it's ITerm2's job to ensure that it's appropriately
sanitised first.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.