From: Petr Janda <petr@...>
Date: 2007-01-25T00:09:16+09:00
Subject: Help with kernel.exec

Hey there,
Im trying to figure out something. If I had Postfix execute a ruby
script that says

Kernel.exec "/usr/sbin/sendmail -i -f #{@sender} -- #{@recipient}"

would this be a huge security risk? to me it seems so because if you had
a specially crafted email address you could execute a different command.
How to protect against it?

Cheers,
Petr

-- 
Posted via http://www.ruby-forum.com/.