>>>>> "Michael" == Michael Sperber <sperber@deinprogramm.de> writes:

Michael> Does the PATH environment variable, for instance, allow
Michael> escaping?

Glibc's implementation of execvp() doesn't allow escaping in PATH,
except for the case where '::' means the current directory, so I'd say
thay it doesn't.

Malcolm