From owner-freebsd-questions  Fri Aug 14 13:24:48 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id NAA06629
          for freebsd-questions-outgoing; Fri, 14 Aug 1998 13:24:48 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from rover.village.org (rover.village.org [204.144.255.49])
          by hub.freebsd.org (8.8.8/8.8.8) with SMTP id NAA06611;
          Fri, 14 Aug 1998 13:24:43 -0700 (PDT)
          (envelope-from imp@village.org)
Received: from harmony [10.0.0.6] 
	by rover.village.org with esmtp (Exim 1.71 #1)
	id 0z7QOO-0006Uy-00; Fri, 14 Aug 1998 14:24:08 -0600
Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.8.8/8.8.3) with ESMTP id OAA17025; Fri, 14 Aug 1998 14:26:05 -0600 (MDT)
Message-Id: <199808142026.OAA17025@harmony.village.org>
To: Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
Subject: Re: Found reason why lpr -r -s doesn't work as expected 
Cc: freebsd-questions@FreeBSD.ORG, freebsd-stable@FreeBSD.ORG
In-reply-to: Your message of "Fri, 14 Aug 1998 20:07:22 +0200."
		<199808141807.UAA13224@internal> 
References: <199808141807.UAA13224@internal>  
Date: Fri, 14 Aug 1998 14:26:05 -0600
From: Warner Losh <imp@village.org>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

In message <199808141807.UAA13224@internal> Andre Albsmeier writes:
:                         if (strchr(line+1, '/'))
:                                 continue;
: This disables the removement of files starting with '/'. This was
: introduced in version 1.14 according to the CVS log. However, I didn't
: find an explanation  why this change was made. Is it a security hole?

Without this fix, people could remove any file on your system by
having remote print access.

Warner

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message