Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 1 Nov 1996 08:35:21 -0700 (MST)
From:      Marc Slemko <marcs@znep.com>
To:        Mikael Karpberg <karpen@ocean.campus.luth.se>
Cc:        freebsd-security@FreeBSD.org
Subject:   Re: /etc/security
Message-ID:  <Pine.BSF.3.95.961101083130.20595B-100000@alive.ampr.ab.ca>
In-Reply-To: <199611011141.MAA08439@ocean.campus.luth.se>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 1 Nov 1996, Mikael Karpberg wrote:

> According to Marc Slemko:
> > > >From the man page:
> > >      -0      Changes xargs to expect NUL (``\0'') characters as seperators,
> > >              instead of spaces and newlines.  This is expected to be used in
> > >              concert with the -print0 function in find.
> > > 
> > > This avoids execing a costly interpreter and keeps the scripts using xargs,
> > > which is useful with very long path lists.
> > 
> > Except for the minor problem that xargs does not have a -0 option
> > on FreeBSD.  GNU xargs does and OpenBSD xargs does.  Below is the
> > diff from OpenBSD to implement the change.  I think it is a worthwhile
> > change, although I haven't really looked too much at the OpenBSD
> > way of doing it to see if it is a good implementation.
> [...patch deleted...]
> 
> Is there anything speaking against this being added?
> And the change in /etc/security taking place?
> I for one would really like to see the scan handle all legal filenames.
> Speaking of which... Is the /tmp cleaning job also errnous in that it will
> not handle all names? Any other scripts in etc which have the same error?

The /tmp cleaning job in /etc/daily should work fine but it is, as it
says, a security risk.

It should be modified to use the new (in -current) -delete option to find
which avoids the race condition. 





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.961101083130.20595B-100000>