Re: Multiple vendors FTP denial of service

[peterw () usa net]

At Wed, 21 Mar 2001 00:55:03 +0200 , Stefan Laudat <stefan () WORLDBANK RO> wrote:

> .... and as a quick fix for nasty shell users having bash prompts on your machine, just
> enter 'set -f' in the /etc/profile.

...which users can override with 'set +f'

> Of course, until we will get a fixed bash or
> a fixed libc(?).

Oh, please. Then the user writes/gets an app that abuses the system
in another way. As another reader mentioned, for shells this is a resource
limit problem, and attacking /bin/sh is the *wrong* way to "fix" the
local exploit concerns.

-Peter