- changed status to resolved
get_status_output uses shell=True in Popen
Issue #2
resolved
subprocess.Popen should not use shell=True. It is a security hazard and spawn of host system dependent $SHELL process. Also see:
http://stackoverflow.com/questions/3172470/actual-meaning-of-shell-true-in-subprocess
This issue might also be the root of the problem we see with JIT on HPC platforms.
Comments (1)
-
reporter - Log in to comment
get_status_output now uses shell=False -- Fixing issue
#2→ <<cset ff7a37e855ce>>