Messages in this thread | | | Date | Mon, 15 Dec 1997 18:23:49 +0100 (MET) | From | Rik van Riel <> | Subject | Re: Conditional SymLinks |
| |
On Fri, 12 Dec 1997, Pavel Machek wrote:
> Also: Be careful. This could introduce *NASTY* security > holes. Imagine: > > HOME=/etc telnet localhost > > Then in.telnetd has good chance of using /etc/tmp as its temporary > directory. BAD.
You don't have write access to /etc/tmp. About in.telnetd I don't know much, except that it's environment isn't inherited from the telnet client program, which can't write in /etc/tmp...
So either your telnetsession will use your own tmp/, or it will try to write in /etc (which will fail).
Rik. +-----------------------------+------------------------------+ | For Linux mm-patches, go to | "I'm busy managing memory.." | | my homepage (via LinuxHQ). | H.H.vanRiel@fys.ruu.nl | | ...submissions welcome... | http://www.fys.ruu.nl/~riel/ | +-----------------------------+------------------------------+
| |