From 45b9dd32a0f89fdfa0fef9743ca5499ecb4b188d Mon Sep 17 00:00:00 2001
From: thl-cmk <thl-cmk@outlook.com>
Date: Sat, 4 Dec 2021 18:24:02 +0000
Subject: [PATCH] Update README.md

---
 README.md | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 34e25c1..2133a7f 100644
--- a/README.md
+++ b/README.md
@@ -14,7 +14,16 @@ adds the following options:
 - source interface (needs root permissions)
 - perfometer
 
-**Note: Source address and source interface uses the "shell=True" option in in the "subprocess.Popen" command. This is highly insecure, so be careful.**
+**Note: Source address and source interface uses the "shell=True" option in in the "subprocess.Popen" command. This is insecure, so be careful.**
+
+To disable this options you need to comment out the line `shell = True` in [~/lib/nagios/plugins/check_traceroute](https://thl-cmk.hopto.org/gitlab/checkmk/vendor-independent/active_check_traceroute/-/blob/master/lib/nagios/plugins/check_traceroute) like this.
+
+```
+    if (source_int is not None) or (source_addr is not None):
+        cmd = ' '.join(cmd)
+        # shell = True
+
+```
 
 **Note**: the original TCP path trace option also needs root permisions.
 
-- 
GitLab