diff options
author | Jeremy Harris <jgh146exb@wizmail.org> | 2020-10-26 17:55:53 +0000 |
---|---|---|
committer | Jeremy Harris <jgh146exb@wizmail.org> | 2020-10-26 17:55:53 +0000 |
commit | 4eb7d1565e026303600c94470c3dc390053df555 (patch) | |
tree | 9138ae397df66b7837e1b68f468ec1885e219e6c /doc | |
parent | e8a6b340d5bff376cf78adeef41d17bbfec3d103 (diff) |
Docs: another detaint mention
Diffstat (limited to 'doc')
-rw-r--r-- | doc/doc-docbook/spec.xfpt | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt index c865e111b..1199a563d 100644 --- a/doc/doc-docbook/spec.xfpt +++ b/doc/doc-docbook/spec.xfpt @@ -18810,7 +18810,10 @@ address (with affixes removed if relevant) is the name of an account on the local system. The check is done by calling the &[getpwnam()]& function rather than trying to read &_/etc/passwd_& directly. This means that other methods of holding password data (such as NIS) are supported. If the local part is a local -user, &$home$& is set from the password data, and can be tested in other +user, +.cindex "tainted data" "de-tainting" +&$local_part_data$& is set to an untainted version of the local part and +&$home$& is set from the password data. The latter can be tested in other preconditions that are evaluated after this one (the order of evaluation is given in section &<<SECTrouprecon>>&). However, the value of &$home$& can be overridden by &%router_home_directory%&. If the local part is not a local user, |