[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Nmh-workers] I need help reading the mhstore man page

From: norm
Subject: [Nmh-workers] I need help reading the mhstore man page
Date: Fri, 28 Feb 2014 08:01:45 -0800

The man page for mhstore recommends that, for the sake of security, I not put
the -auto switch in .mh_profile. Whatever the security risk is, would it not
also be present if I invoke mhstore with that switch? But the man page does
not seem to recommend against that.

The '|' facility is an obvious security risk, but as I read the man page it
would never be invoked unless my .mh_profile specifies a formatting string.

So assuming that my .mh_profile has no entries of the form


what are the security risks of the -auto switch?

    Norman Shapiro

reply via email to

[Prev in Thread] Current Thread [Next in Thread]