[BusyBox] Improving Our Development Process

[Matt Kraai]

On Wed, Jan 24, 2001 at 08:19:45PM +0300, Vladimir N. Oleynik wrote:
> Matt Kraai wrote:
> > Actually, I like the idea of a small suid wrapper even better than
> > my suggestion.  It should eliminate most of the code duplication.
> > Sorry for not picking up on it sooner.  Do you already have an
> > implementation available?
> 
> Well certainly. I already resulted here it 2 times. 
> To not litter, look:  
> ftp://ftp.simtreas.ru/pub/my/bb/new/suid_wrapper.c/
> And its size:
> ftp://ftp.simtreas.ru/pub/my/bb/boot/tree/bin/ping

I did see this earlier but it must have slipped my mind.  I don't
see how it is safe, however.  It is trivial for someone to rewrite
argv when executing this wrapper.  For instance, I could create a
symlink from /tmp/rm to /bin/ping (which is a hardlink to your
applet) and then run /tmp/rm -rf / to wipe the harddrive.

Matt