Update README.md

README.md

@@ -14,7 +14,16 @@ adds the following options:
 - source interface (needs root permissions)
 - perfometer
 
-**Note: Source address and source interface uses the "shell=True" option in in the "subprocess.Popen" command. This is highly insecure, so be careful.**
+**Note: Source address and source interface uses the "shell=True" option in in the "subprocess.Popen" command. This is insecure, so be careful.**
+
+To disable this options you need to comment out the line `shell = True` in [~/lib/nagios/plugins/check_traceroute](https://thl-cmk.hopto.org/gitlab/checkmk/vendor-independent/active_check_traceroute/-/blob/master/lib/nagios/plugins/check_traceroute) like this.
+
+```
+    if (source_int is not None) or (source_addr is not None):
+        cmd = ' '.join(cmd)
+        # shell = True
+
+```
 
 **Note**: the original TCP path trace option also needs root permisions.