Board index Unix Security

vi (Re: =-> Is /tmp: -rw-rw-rw- root system" a risc?)

vi (Re: =-> Is /tmp: -rw-rw-rw- root system" a risc?)

Post by Illtud Dani » Tue, 23 May 1995 04:00:00




[dangers of vi with ./.exrc]

Quote:>The startup file .exrc is run from first the $HOME directory
>and then if one is in the "." directory that is run as well.
>Thus someone could put a .exrc file in /tmp and anyone who
>does a vi in that directory would process the ./.exrc file
>unknowlingly.

[snip shell escapes in .exrc]

Quote:>Recent versions of vi introduced a set option of exrc/noexrc.

[snip]

FWIW, my version of vi will only execute .exrc's owned by you.
It's a 1988 version as well.
--

"I was born outta time" Napoleon Wilson

 
 
 
Top

vi (Re: =-> Is /tmp: -rw-rw-rw- root system" a risc?)

Post by Thomas Roessl » Wed, 24 May 1995 04:00:00



>>Recent versions of vi introduced a set option of exrc/noexrc.
>[snip]
>FWIW, my version of vi will only execute .exrc's owned by you.
>It's a 1988 version as well.

According to the nvi documentation, it must be owned by yourself or by
root. But consider an SGI with (almost) unrestricted chown. :-(

tlr
--
Mathematik ist der Prototyp der Geisteswissenschaft.

 
 
 
Top

1. I want FTP default to be -rwxrwxrwx files, NOT system default like -rw-rw-rw- files !

Hi,

I am a "rookie" HP-UNIX  Sys Adminstrator.

I want FTP to be default at -rwxrwxrwx for all files.  I don't want the
system default like -rw-rw-rw- or whatever.

I tried "umask" in the profile file (setting umask to 0) and I got the
system default mode like -rw-rw-rw-.  I tried the ftpd command in the
"inetd.conf" configuration file and I still got the system default.  How can
I "bypass" this system default ?  What does the system default come from ?
I really hope it's possible.

Let you know that I am not interested in "anonymous" FTP.

Any recommedation or suggestion ?

Thank you,
John

2. [Fwd: How to POP3 Mail Help?]

3. RedHat 4.2 and 2.0.31 kernel

4. A SIMPLE SHELL PROGRAM CHANGE /etc/passwd mode to -rw-rw-rw-

5. Proftpd Blues

6. File permission set to -rw-rw-rw-?by Apache/CGI?

7. SGI 4D/25 port?

8. flexlm on HPs requires rw-rw-rw- on /dev/lan0

9. Summary: ftpd from SunOS 4.1.3 creates files with rw-rw-rw

10. ftpd from SunOS 4.1.3 creates files with rw-rw-rw

11. What does "srw-rw-rw-" mean?

12. Smail saves /usr/spool/mail/<user> as rw-rw----


All times are UTC
Board index