[m3mnoch]

try this then:

$ env X="() { :;} ; echo busted" /bin/bash -c "echo wow"

that'll pop out of usr, so you'll fail.

[fleitz]

Yup, definitely busted.