Article View: comp.bugs.sys5
Article #743Re: A security hole
From: Rich Salz
Date: Wed, 23 Mar 1988 16:19
Date: Wed, 23 Mar 1988 16:19
8 lines
766 bytes
766 bytes
Every single program that is subject to the "IFS" trick can be protected by written a wrapper that sets the environment properly, then calls the real program. If you put all these programs in one common directory, then you can have one front-end which has hardlinks all over the place, and a simple exec based on argv[0]. /r$ -- Please send comp.sources.unix-related mail to rsalz@uunet.uu.net.
Technical Details
Message-ID:
<544@fig.bbn.com>Path:
arc1-ca.pugleaf.net!utzoo!mnetor!uunet!husc6!bbn!bbn.com!rsalzReferences:
<181@wsccs.UUCP> <722@rivm05.UUCP> <478@minya.UUCP> <892@cosmo.UUCP> <175@pcsbst.UUCP>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!mnetor!uunet!husc6!bbn!bbn.com!rsalz From: rsalz@bbn.com (Rich Salz) Newsgroups: comp.bugs.sys5 Subject: Re: A security hole Message-ID: <544@fig.bbn.com> Date: 23 Mar 88 16:19:46 GMT References: <181@wsccs.UUCP> <722@rivm05.UUCP> <478@minya.UUCP> <892@cosmo.UUCP> <175@pcsbst.UUCP> Organization: BBN Laboratories, Cambridge MA Lines: 8