http://www.perlmonks.org?node_id=1219232


in reply to setuid system() calls on Solaris 11

system() only invokes the shell if it has a single arg containing metachars (so it's relying on the shell to parse the command line). If you do that processing yourself, perl will execute the command directly. For example, change this first line to the second line: 
system "foo -x 'a b' -y bar";
system "foo", "-x", "a b", "-y", "bar";

[download]

Dave.

Replies are listed 'Best First'.
Re^2: setuid system() calls on Solaris 11
by afoken (Chancellor) on Jul 25, 2018 at 16:27 UTC

    See also The problem of "the" default shell for the interactions of system and its friends with the default shell.

    Alexander

    --
    Today I will gladly share my knowledge and experience, for there are no sweeter words than "I told you so". ;-)
[reply]

In Section Seekers of Perl Wisdom