execv-like system call
Tuesday, June 30th, 2009 by mopeyFrom the system man page, it explicitely says:
Do not use system() from a program with set-user-ID or set-group-ID privileges, because strange values for some environment variables might be used to subvert system integrity.
Since system is basically a fork and wait, it’s pretty easy to use execv instead. Here is a snippet from the goog_pam module [...]