Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 07 Oct 2000 17:50:08 -0600
From:      Warner Losh <imp@village.org>
To:        behanna@zbzoom.net
Cc:        FreeBSD-Stable <stable@FreeBSD.org>
Subject:   Re: Security problem with "script"? 
Message-ID:  <200010072350.RAA00780@harmony.village.org>
In-Reply-To: Your message of "Sat, 07 Oct 2000 16:41:13 EDT." <Pine.BSF.4.21.0010071640460.7433-100000@topperwein.dyndns.org> 
References:  <Pine.BSF.4.21.0010071640460.7433-100000@topperwein.dyndns.org>  

next in thread | previous in thread | raw e-mail | index | archive | help
In message <Pine.BSF.4.21.0010071640460.7433-100000@topperwein.dyndns.org> Chris BeHanna writes:
:     Er, wouldn't that give a user root access to do anything he or she
: wanted?

Yes.  That's the logical conclusion if you give someone shell access,
or access to any program that can fork a shell.  "TOYOTA: You asked
for it, you got it."

Warner


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200010072350.RAA00780>