WARNING! Re: SUMMARY:Floppy mount/umount on Sparc2.

From: Birger Wathne (birger@vest.sdata.no)
Date: Thu May 16 1991 - 02:40:54 CDT


Any setuid program to mount/umount the floppy written along the lines
of the posted examples have a security hole.

You have to set the PATH environment variable explicitly within your
c program, as "mount" executes a sub-process (mount_pcfs) using your
path. If a user makes his own program called "mount_pcfs" you're a goner...

I have tried this myself. I'm running 4.1.1

Birger



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:06:13 CDT