Date: 24 Jun 2001 17:57:26 +0200 From: Dag-Erling Smorgrav <des@ofug.org> To: "Ted Mittelstaedt" <tedm@toybox.placo.com> Cc: <js43064n@pace.edu>, <freebsd-questions@FreeBSD.ORG>, <freebsd-stable@FreeBSD.ORG>, <freebsd-security@FreeBSD.ORG> Subject: Re: Kernel Panic Message-ID: <xzpithl7tw9.fsf@flood.ping.uio.no> In-Reply-To: <004101c0fc8c$44e12280$1401a8c0@tedm.placo.com> References: <004101c0fc8c$44e12280$1401a8c0@tedm.placo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
"Ted Mittelstaedt" <tedm@toybox.placo.com> writes:
> That would be impossible unless you had "." in your path. If
> you did (which is a very BAD thing) then yes your script probably
> loaded itself (assuming you named it "pine). This is why the
> system defaults to NOT having "." in the path.
No: 1) he simply had the script, named "pine", in a directory that was
in his search path (e.g. $HOME/bin), and 2) the reason why you
shouldn't have any relative path ("." included) in your search path is
that you'd get unpredictible and surprising results, and potentially
stumble across trojans (imagine an "ls" binary in some random user's
home directory that, when you ran it, installed a setuid shell, or
sent spam in your name, before giving you a carefully edited directory
listing)
> However, if the script DID load itself, a recursive script
> under an ordinary user ID isn't allowed to crash the
> system.
Yes it is, unfortunately. FreeBSD doesn't like running out of swap
space. Matt Dillon has been trying to correct this in -CURRENT, but
it's not completely fixed yet.
DES
--
Dag-Erling Smorgrav - des@ofug.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpithl7tw9.fsf>