php-bugs@lists.php.net (szo at szo dot

From: szo at szo dot hu
Operating system: all
PHP version: 5.1.0
PHP Bug Type: Unknown/Other Function
Bug description: php's exec() requires a shell

Description:
------------
I use php in a chroot()-et environment, and I can't use exec() unless I
provide a shell in the chroot as well, which lowers it's security a bit.
The exec() requires a shell because it's implemented using popen(). I
think it should be possible to aboid popen and use dup() instead.


--
Edit bug report at http://bugs.php.net/?id=35398&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=35398&r=trysnapshot4
Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=35398&r=trysnapshot50
Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=35398&r=trysnapshot51
Fixed in CVS: http://bugs.php.net/fix.php?id=35398&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=35398&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=35398&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=35398&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=35398&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=35398&r=support
Expected behavior: http://bugs.php.net/fix.php?id=35398&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=35398&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=35398&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=35398&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=35398&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=35398&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=35398&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=35398&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=35398&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=35398&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=35398&r=mysqlcfg