Re: Conditional SymLinks

Rik van Riel (H.H.vanRiel@fys.ruu.nl)
Mon, 15 Dec 1997 18:23:49 +0100 (MET)


On Fri, 12 Dec 1997, Pavel Machek wrote:

> Also: Be careful. This could introduce *NASTY* security
> holes. Imagine:
>
> HOME=/etc telnet localhost
>
> Then in.telnetd has good chance of using /etc/tmp as its temporary
> directory. BAD.

You don't have write access to /etc/tmp.
About in.telnetd I don't know much, except that it's
environment isn't inherited from the telnet client
program, which can't write in /etc/tmp...

So either your telnetsession will use your own tmp/,
or it will try to write in /etc (which will fail).

Rik.
+-----------------------------+------------------------------+
| For Linux mm-patches, go to | "I'm busy managing memory.." |
| my homepage (via LinuxHQ). | H.H.vanRiel@fys.ruu.nl |
| ...submissions welcome... | http://www.fys.ruu.nl/~riel/ |
+-----------------------------+------------------------------+