Re: es security

[haahr@mv.us.adobe.com (Paul Haahr)]

-p notwithstanding, i don't consider es sufficient for ``secure'' scripts.

i don't know off-hand of any real problems.  neither i nor anybody i know
has analyzed for problems when using it for set-uid/set-gid scripts.  my
presumption before a serious analysis has been done is that such a script
is insecure.  in the case of es in particular, there are so many places
where the string -> program-fragment transition can happen that i wouldn't
feel secure that one such potential transition would happen when the author
of a supposedly secure script didn't want it.

paul        

ps:  i just thought of one real problem which is an impediment to using
straight es-0.88 for secure scripts.  the -l flag should probably be 
ignored if -p is used; it isn't right now.

pps:  what about the old symbolic link to a shell script named ``-s''?