Messages in this thread | | | Date | Mon, 6 Sep 2004 09:56:03 +0200 | From | Tonnerre <> | Subject | Re: The argument for fs assistance in handling archives (was: silent semantic changes with reiser4) |
| |
Salut,
On Thu, Sep 02, 2004 at 10:38:54PM +0200, Frank van Maarseveen wrote: > Can it do this: > > cd FC2-i386-disc1.iso > ls > > or this: > > cd /dev/sda1 > ls > cd /dev/floppy > ls > cd /dev/cdrom > ls > > ?
Actually I see some small-security-hole-you-can-drive-a-big-yellow-truck-with-flashes-on-through problem.
$ cat fs_header owner_root flags_with_suid evil_program > evil.iso $ ls -l evil.iso/evil_program -rwsr-xr-x 1 root root 24 2003-11-09 16:41 evil.iso/evil_program $ evil.iso/evil_program Mwahaha, I got root! Copy-right violating IP... done. Hijacking administrators wife... done. Overwriting OS with Parachute 2010... done.
etc. pp.
Tonnerre [unhandled content-type:application/pgp-signature] | |