lkml.org 
[lkml]   [1997]   [Dec]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Conditional SymLinks
On Fri, 12 Dec 1997, Pavel Machek wrote:

> Also: Be careful. This could introduce *NASTY* security
> holes. Imagine:
>
> HOME=/etc telnet localhost
>
> Then in.telnetd has good chance of using /etc/tmp as its temporary
> directory. BAD.

You don't have write access to /etc/tmp.
About in.telnetd I don't know much, except that it's
environment isn't inherited from the telnet client
program, which can't write in /etc/tmp...

So either your telnetsession will use your own tmp/,
or it will try to write in /etc (which will fail).

Rik.
+-----------------------------+------------------------------+
| For Linux mm-patches, go to | "I'm busy managing memory.." |
| my homepage (via LinuxHQ). | H.H.vanRiel@fys.ruu.nl |
| ...submissions welcome... | http://www.fys.ruu.nl/~riel/ |
+-----------------------------+------------------------------+


\
 
 \ /
  Last update: 2005-03-22 13:40    [W:0.079 / U:2.620 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site