|
execl() and friends do not use the shell. they do not (for the most part) look at environment variables, and they do not perform wildcard expansions or alias interpretations (those are shell features). they pass their params directly to the kernel, and are safe from shell manipulations. IFS is entirely a shell thing.
these functions can be tricked by the use of chroot, although you must be root to chroot, so it's not a very big concern.
correction, i believe the execp* functions use the PWD environment variable to build an absolute path. and some others just read and pass the environment directly, but they do not use the environment variables for anything.
|