Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 29 Aug 1999 09:09:30 -0400 (EDT)
From:      <dynamo@ime.net>
To:        Ben Gras <ben@euro.net>
Cc:        security@FreeBSD.ORG
Subject:   Re: Not sure if you got it...
Message-ID:  <Pine.BSI.4.02.9908290909070.26964-100000@ime.net>
In-Reply-To: <19990829150958.A53712@euronet.nl>

next in thread | previous in thread | raw e-mail | index | archive | help

hrm. i just realized i emailed security instead of security-officer. boy
do i feel stupid. anyway, youre right.

On Sun, 29 Aug 1999, Ben Gras wrote:

> All,
> 
> On Sat, Aug 28, 1999 at 10:22:12PM -0400, dynamo@ime.net wrote:
>  > to stop rebooting from working right any user can just do this...
>  > ln -s /file/with/blocked/io/such/as/a/tty /var/tmp/vi.recover/recover.file
>  > this is my second try -- if you can gimmie an "ok" so i know you got this
>  > i would appreciate it.
> 
> On a related note.. is there any good reason to take the vi.recover business
> out of the boot process? It seems like a strangely vulnerable place to be
> processing user-controlled files, using shellscript under root even. And
> why during the boot? That only happens once every few years anyway (touch
> wood) ;-).
> 
> Sounds like a crontab job to me.
> 
> 	=Ben
> 
> 
> 

--
- dynamo@ime.net, lumpy_
- vi -c'1,%s/^[^#]/#&/' /etc/inetd.conf; kill -HUP `cat /var/run/inetd.pid`
--



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.4.02.9908290909070.26964-100000>