lkml.org 
[lkml]   [1997]   [Dec]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: Conditional SymLinks
    On Tue, 16 Dec 1997, Pavel Machek wrote:

    > > About in.telnetd I don't know much, except that it's
    > > environment isn't inherited from the telnet client
    > > program, which can't write in /etc/tmp...
    >
    > Well, environment is passed using special protocal. How much of it is
    > used depends on in.telned version. Look:
    >
    [proof of Pavel's (correct) theory]
    >
    > And what about suid programs?
    >
    > TMP=/etc ping localhost?
    >
    > Ok, ping will not use $TMP, but X for sure will?
    >
    > No, no, this is not secure.

    OTOH, do you know of any setuid programs that behave so
    badly that they are a security hole?

    Rik.
    +-----------------------------+------------------------------+
    | For Linux mm-patches, go to | "I'm busy managing memory.." |
    | my homepage (via LinuxHQ). | H.H.vanRiel@fys.ruu.nl |
    | ...submissions welcome... | http://www.fys.ruu.nl/~riel/ |
    +-----------------------------+------------------------------+


    \
     
     \ /
      Last update: 2005-03-22 13:40    [W:0.020 / U:30.700 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site