Stian Ellingsen dc3d6a6db1 Use env, not sh in zfsctl_snapshot_{,un}mount() ... Call mount and umount via /usr/bin/env instead of /bin/sh in zfsctl_snapshot_mount() and zfsctl_snapshot_unmount(). This change fixes a shell code injection flaw. The call to /bin/sh passed the mountpoint unescaped, only surrounded by single quotes. A mountpoint containing one or more single quotes would cause the command to fail or potentially execute arbitrary shell code. This change also provides compatibility with grsecurity patches. Grsecurity only allows call_usermodehelper() to use helper binaries in certain paths. /usr/bin/* is allowed, /bin/* is not.		2017-02-03 10:24:17 -08:00
..
avl	Fix uninitialized variable in avl_add()	2017-02-03 10:23:42 -08:00
nvpair	OpenZFS 7263 - deeply nested nvlist can overflow stack	2016-09-09 13:21:09 -07:00
unicode	Support parallel build trees (VPATH builds)	2015-07-17 13:42:51 -07:00
zcommon	Fix uioskip crash when skip to end	2015-09-29 15:27:14 -07:00
zfs	Use env, not sh in zfsctl_snapshot_{,un}mount()	2017-02-03 10:24:17 -08:00
zpios	Linux 4.2 compat: misc_deregister()	2015-09-01 09:33:18 -07:00
.gitignore	gitignore: anchor entries at their respective directory	2013-04-02 10:50:17 -07:00
Makefile.in	Prevent rm modules.* when make install	2015-12-23 17:29:34 -08:00