Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Looking for BASH in the environment instead of invoking it directly enables attacks where malware could escalate privileges by pointing BASH to itself and tricking the user into entering a superuser password when a user invokes our script, a familiar request the user may be expecting.
- Loading branch information