=== modified file 'initramfs-tools-hook'
--- initramfs-tools-hook	2017-02-21 21:38:02 +0000
+++ initramfs-tools-hook	2017-02-21 21:42:08 +0000
@@ -157,7 +157,7 @@
     if [ -x "$hook" ]; then
         # Copy any files needed by the network hook
 	MANDOSNETHOOKDIR=/etc/mandos/network-hooks.d MODE=files \
-	    VERBOSITY=0 "$hook" files | while read file target; do
+	    VERBOSITY=0 "$hook" files | while read -r file target; do
 	    if [ ! -e "${file}" ]; then
 		echo "WARNING: file ${file} not found, requested by Mandos network hook '${hook##*/}'" >&2
 	    fi

=== modified file 'initramfs-tools-script'
--- initramfs-tools-script	2017-02-21 21:38:02 +0000
+++ initramfs-tools-script	2017-02-21 21:42:08 +0000
@@ -115,7 +115,7 @@
 # parse /conf/conf.d/cryptroot.  Format:
 # target=sda2_crypt,source=/dev/sda2,key=none,keyscript=/foo/bar/baz
 exec 3>/conf/conf.d/cryptroot.mandos
-while read options; do
+while read -r options; do
     newopts=""
     # Split option line on commas
     old_ifs="$IFS"

=== modified file 'mandos-keygen'
--- mandos-keygen	2017-01-25 19:38:31 +0000
+++ mandos-keygen	2017-02-21 21:42:08 +0000
@@ -326,10 +326,10 @@
 	else
 	    tty --quiet && stty -echo
 	    echo -n "Enter passphrase: " >/dev/tty
-	    read first
+	    read -r first
 	    tty --quiet && echo >&2
 	    echo -n "Repeat passphrase: " >/dev/tty
-	    read second
+	    read -r second
 	    if tty --quiet; then
 		echo >&2
 		stty echo