From Joerg.Schilling at fokus.fraunhofer.de  Wed Sep  2 15:11:17 2020
From: Joerg.Schilling at fokus.fraunhofer.de (Joerg Schilling)
Date: Wed, 2 Sep 2020 15:11:17 +0200
Subject: Dangerous missconfiguration on the buildfarm
Message-ID: <5f4f99f5.J6mVZwMzVHFdOPG/%Joerg.Schilling@fokus.fraunhofer.de>

Hi,

yesterday I discovered that /bin/sh on the Solaris 11 machines does not
work correctly and after an hour of investigation, it turned out that this 
missbehavior is caused by enforcing to set the the environment variable 
FIGNORE from a script in /etc/environmen/*. That causes ksh93 (/bin/sh on 
Solaris 11 links to it) to expand

	echo *

into a file list that includes all files that start with a dot, including 
. and ..

This causes several makefiles to abort because unexpected arguments are 
propagates to commands like 'ln -s' and this is hihgly dangerous, if you e.g.
call
	rm -rf *



J?rg

-- 
 EMail:joerg at schily.net                    (home) J?rg Schilling D-13353 Berlin
    joerg.schilling at fokus.fraunhofer.de (work) Blog: http://schily.blogspot.com/
 URL: http://cdrecord.org/private/ http://sf.net/projects/schilytools/files/'