maart@cs.vu.nl (Maarten Litmaath) (09/29/90)
Archive-name: indir/28-Sep-90 Original-posting-by: maart@cs.vu.nl (Maarten Litmaath) Original-subject: Re: How secure are shell scripts? Archive-site: star.cs.vu.nl [192.31.231.42] Archive-directory: /pub/maart Reposted-by: emv@math.lsa.umich.edu (Edward Vielmetti) In article <1446@svin02.info.win.tue.nl>, rcpieter@svin02.info.win.tue.nl (Tiggr) writes: )... A setuid shell )script owned by root (world executable) enables ANY user to have a root shell )by typing two commands. You can prevent this by using the indir(1) package from the comp.sources.unix archives. Also available through anonymous ftp from star.cs.vu.nl (192.31.231.42), directory pub/maart, which contains various vi documents as well. -- "the C shell is flakier than a snowstorm." (Guy Harris)