From owner-freebsd-security Sun Aug 29 6:12:27 1999 Delivered-To: freebsd-security@freebsd.org Received: from ime.net (ime.net [209.90.192.3]) by hub.freebsd.org (Postfix) with ESMTP id 3B93F15096 for ; Sun, 29 Aug 1999 06:12:21 -0700 (PDT) (envelope-from dynamo@ime.net) Received: from ime.net (ime.net [209.90.192.3]) by ime.net (8.8.7/8.8.7) with SMTP id JAA01045; Sun, 29 Aug 1999 09:09:31 -0400 (EDT) Date: Sun, 29 Aug 1999 09:09:30 -0400 (EDT) From: To: Ben Gras Cc: security@FreeBSD.ORG Subject: Re: Not sure if you got it... In-Reply-To: <19990829150958.A53712@euronet.nl> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org hrm. i just realized i emailed security instead of security-officer. boy do i feel stupid. anyway, youre right. On Sun, 29 Aug 1999, Ben Gras wrote: > All, > > On Sat, Aug 28, 1999 at 10:22:12PM -0400, dynamo@ime.net wrote: > > to stop rebooting from working right any user can just do this... > > ln -s /file/with/blocked/io/such/as/a/tty /var/tmp/vi.recover/recover.file > > this is my second try -- if you can gimmie an "ok" so i know you got this > > i would appreciate it. > > On a related note.. is there any good reason to take the vi.recover business > out of the boot process? It seems like a strangely vulnerable place to be > processing user-controlled files, using shellscript under root even. And > why during the boot? That only happens once every few years anyway (touch > wood) ;-). > > Sounds like a crontab job to me. > > =Ben > > > -- - dynamo@ime.net, lumpy_ - vi -c'1,%s/^[^#]/#&/' /etc/inetd.conf; kill -HUP `cat /var/run/inetd.pid` -- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message