🚀 go-pugleaf

root wrote:
> 
> #!/bin/sh
> #q2nocd -
> #Hack to get around the cd requirements in Quake2.
> #Quake simply looks for a mounted iso9660 filesystem
> #with a file called quake.exe in it's root. Yes, quite pathetic.

Wouldn't it be easier just to make the filesystem image once and leave
it standing by for mounting instead of having a shell script remake the
image every time you run Quake 2?  Kind of like what I did 3 days ago..

--> http://www.min.net/~douglas/quake2cd.html

Plus, since the echo redirection happily follows symbolic links, you've
just given any non-root user on the system the means to overwrite any
file on your machine.

lamer@xyzzy$ ls -l /etc/passwd
-rw-r--r--   1 root     root        48173 Jan  6 00:39 /etc/passwd
lamer@xyzzy$ cd /tmp
lamer@xyzzy$ mkdir q2nocd
lamer@xyzzy$ cd q2nocd
lamer@xyzzy$ ln -s /etc/passwd quake2.exe

[Meanwhile, in root-land...]
bash# ./q2nocd.sh
[Game bombs out, no CD mounted]

lamer@xyzzy$ ls -l /etc/passwd
-rw-r--r--   1 root     root            1 Jan  9 13:54 /etc/passwd

If someone made the symbolic link to /dev/hda, you'd end up overwriting
the first byte of your bootstrap.

Maybe 'touch $TMP/q2nocd/quake2.exe' would work better.  Either that or
change $TMP's path to something more sensible.

-- 
###:::###:::###:::###:::# Douglas Winslow - douglas@min.net
##:::###:::###:::###:::## http://www.min.net/~douglas/
#:::###:::###:::###:::### Linux: First to patch Pentium 0F C7!