On: CVE-2014-6271: Remote code execution through bash

[emmelaich]

So proud of myself; my Python has env={} in the call to Popen().

The ultimate whitelist.

And they're executed with sudo but sudo empties out env vars with functions in them on the machines I use. Oldest is RHEL5.