Subject: Re: security/7060: find and rm
To: None <richard.earnshaw@arm.com>
From: Chris Jones <cjones@rupert.honors.montana.edu>
List: netbsd-bugs
Date: 03/01/1999 10:26:23
>>>>> "Richard" == Richard Earnshaw <rearnsha@arm.com> writes:

Richard> Chdirs should never be down more than one level.  It ought to
Richard> be possible to compare the inodes of parent after the chdir
Richard> to ensure nothing unsafe happened.

Ah!  That sounds really good.

Richard> If this does work, then the idea could probably be extended
Richard> to a "safe" -exec which ran the exec'ed program in the
Richard> chdir'ed directory containing the named file -- this would
Richard> then lead to a safe(er) way of doing the chmod and other
Richard> ideas.

If this sounds good to people, I volunteer to add a -safeexec to find.

Chris

-- 
-----------------------------------------------------cjones@math.montana.edu
Chris Jones                                          cjones@honors.montana.edu
           Mad scientist at large                    cjones@nervana.montana.edu
"Is this going to be a stand-up programming session, sir, or another bug hunt?"