Bug#276419: [Pkg-shadow-devel] Bug#276419: Overflated severity?

[Helmut Waitzmann (Debian Bug Tracking System)]

Christian Perrier <bubulle@debian.org> quotes (I don't know whom):

>> Since there is a very simple fix (escape of arguments, which
>> people used to shell programming should be able to achieve),

... which is not so simple, if the arguments are to be computed by some
program, for instance:

$ find . \! \( -exec chown -- root:other '{}' \; \) -o -print0 | \
   xargs -0 -e -r -- sh -c \
   'exec su -- - root \
   '\''for f; do test -O "$f" \! -L "$f" && chmod -- u-s,go=u-w "$f"; done'\'' \
   -sh ${1+"$@"} < /dev/tty' sh

... or is impossible if one wants to supply invocation shell options when
invoking a shell

$ su -- - "$LOGNAME" -x

, a script file or positional parameters and no commandline.
-- 
Wenn Sie mir E-Mail schreiben, stellen |  When writing me e-mail, please
Sie bitte vor meine E-Mail-Adresse     |  precede my e-mail address with
meinen Vor- und Nachnamen, etwa so:    |  my full name, like
Helmut Waitzmann <xxx@example.net>, (Helmut Waitzmann) xxx@example.net