From owner-freebsd-security Tue Jul 10 14:12:12 2001 Delivered-To: freebsd-security@freebsd.org Received: from mailhost.freebsd.lublin.pl (mailhost.freebsd.lublin.pl [212.182.115.12]) by hub.freebsd.org (Postfix) with ESMTP id 4A73137B403 for ; Tue, 10 Jul 2001 14:12:09 -0700 (PDT) (envelope-from venglin@freebsd.lublin.pl) Received: from clitoris (root@mailhost.freebsd.lublin.pl [212.182.115.12]) by mailhost.freebsd.lublin.pl (8.11.4/8.11.4) with SMTP id f6ALBT936123; Tue, 10 Jul 2001 23:11:31 +0200 (CEST) (envelope-from venglin@freebsd.lublin.pl) Message-ID: <029901c10984$9eab3d00$2001a8c0@clitoris> From: "Przemyslaw Frasunek" To: "Jason DiCioccio" , "'Mike Tancsa'" , References: <657B20E93E93D4118F9700D0B73CE3EA02FFEFA3@goofy.epylon.lan> Subject: Re: FreeBSD Security Advisory FreeBSD-SA-01: Date: Tue, 10 Jul 2001 23:09:32 +0200 Organization: babcia padlina ltd. MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > trivial.. the only way I have found to temporarily stop stupid script > kiddies while I upgrade is: > touch /tmp/sh > chmod 0 /tmp/sh The simple workaround is to use my rexec kernel module. It strips unneeded or suspicious environment variables, arguments, etc... http://www.frasunek.com/sources/security/rexec/ -- * Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NIC-HDL: PMF9-RIPE * * Inet: przemyslaw@frasunek.com ** PGP: D48684904685DF43EA93AFA13BE170BF * To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message