[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug #32501] Manual page does not include a warning for GREP_OPTIONS

From: Seungbeom Kim
Subject: [bug #32501] Manual page does not include a warning for GREP_OPTIONS
Date: Fri, 15 Apr 2011 07:54:04 +0000
User-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv: Gecko/20110319 Firefox/3.6.16 ( .NET CLR 3.5.30729; .NET4.0C)

Follow-up Comment #4, bug #32501 (project grep):

I've been bitten by this too. -n is another option that seems nice and
harmless on an interactive setting but that causes problems when the output is
piped into a script.

Unsetting GREP_OPTIONS cannot be the responsibility of scripts, because there
are already tons of old scripts that don't even know about GREP_OPTIONS. If
scripts were required to defend themselves even in the presence of such
environment variables, they would always have to start any serious work with
an empty environment.

Security could be an issue if the program could be allowed to execute
something not supposed to be executed, especially when the program is setuid
as root, but it's not the case here; it's not a security flaw of grep per se.


Reply to this item at:


  Message sent via/by Savannah

reply via email to

[Prev in Thread] Current Thread [Next in Thread]