Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Jun 2002 04:55:51 +0100
From:      void <float@firedrake.org>
To:        void <float@firedrake.org>
Cc:        hackers@freebsd.org
Subject:   Re: security bug in /etc/rc in -STABLE?
Message-ID:  <20020617035551.GB18088@parhelion.firedrake.org>
In-Reply-To: <20020613161739.GA25926@parhelion.firedrake.org>
References:  <20020613161739.GA25926@parhelion.firedrake.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jun 13, 2002 at 05:17:39PM +0100, void wrote:
> 
>  # Remove X lock files, since they will prevent you from restarting X11
>  # after a system crash.
>  #
> -rm -f /tmp/.X*-lock /tmp/.X11-unix/*
> +rm -f /tmp/.X*-lock
> +rm -fr /tmp/.X11-unix
> 
> Aren't both the old and new versions vulnerable to symlink attacks?

No.  From rm(1):

     The rm utility removes symbolic links, not the files referenced by
     the links.

-- 
 Ben

"An art scene of delight
 I created this to be ..."		-- Sun Ra

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020617035551.GB18088>