Skip site navigation (1)Skip section navigation (2)
Date:      	Tue, 21 May 1996 21:20:22 -0700 (PDT)
From:      Tom Samplonius <tom@uniserve.com>
To:        "Chris J. Layne" <coredump@nervosa.com>, freebsd-security@FreeBSD.ORG
Subject:   Re: [linux-security] Things NOT to put in root's crontab (fwd)
Message-ID:  <Pine.BSF.3.91.960521210454.17971B-100000@haven.uniserve.com>
In-Reply-To: <Pine.BSF.3.91.960521203607.17971A-100000@haven.uniserve.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On Tue, 21 May 1996, Tom Samplonius wrote:

> 
> On Tue, 21 May 1996, Chris J. Layne wrote:
> 
> > I think this applies to our cleanup of /tmp in /etc/rc
> 
>   I think it doesn't.
> 
>   Our rm removes links, not files pointed to by links.  So:
> 
> cd /tmp
> ln -s /etc/passwd thing
> rm thing
> 
> will remove the link, not /etc/passwd.

  I don't know what I was thinking when I wrote that:

cd /tmp
ln -s /etc b
rm b/passwd

will remove /etc/passwd.

  However, I don't believe that this method can exploited with 
the standard /etc/rc because we use "rm -rf".  I don't find should be 
doing a depth-first traversal in this case.

  I'll get sleep before I comment more.

Tom



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.960521210454.17971B-100000>