IFS Marc Feeley (09 Mar 2001 04:29 UTC)
Re: IFS sperber@xxxxxx (29 Apr 2001 10:36 UTC)

IFS Marc Feeley 09 Mar 2001 04:29 UTC

This is slightly off topic but...

Could someone explain to me the need for the IFS line?  I read the
link to the Secure UNIX Programming FAQ, and am still puzzled.
In particular if an attacker has set IFS to "=" doesn't it mean
that the line

    IFS=" "

in the script will be interpreted as

    IFS " "

which doesn't solve the security hole.  So why bother?

Marc