[comp.archives] [unix-questions] Re: How secure are shell scripts?

maart@cs.vu.nl (Maarten Litmaath) (09/29/90)

Archive-name: indir/28-Sep-90
Original-posting-by: maart@cs.vu.nl (Maarten Litmaath)
Original-subject: Re: How secure are shell scripts?
Archive-site: star.cs.vu.nl [192.31.231.42]
Archive-directory: /pub/maart
Reposted-by: emv@math.lsa.umich.edu (Edward Vielmetti)

In article <1446@svin02.info.win.tue.nl>,
	rcpieter@svin02.info.win.tue.nl (Tiggr) writes:
)...  A setuid shell
)script owned by root (world executable) enables ANY user to have a root shell
)by typing two commands.

You can prevent this by using the indir(1) package from the
comp.sources.unix archives.  Also available through anonymous ftp
from star.cs.vu.nl (192.31.231.42), directory pub/maart, which
contains various vi documents as well.
--
            "the C shell is flakier than a snowstorm."  (Guy Harris)