[BusyBox] Improving Our Development Process
Vladimir N. Oleynik
dzo at simtreas.ru
Wed Jan 24 18:03:22 UTC 2001
Matt Kraai wrote:
> I did see this earlier but it must have slipped my mind. I don't
> see how it is safe, however. It is trivial for someone to rewrite
> argv when executing this wrapper. For instance, I could create a
> symlink from /tmp/rm to /bin/ping (which is a hardlink to your
> applet) and then run /tmp/rm -rf / to wipe the harddrive.
Hmm, thanks. Require check arg[0]. Not big code.
I use kernel paths: http://www.openwall.com/linux/
and not have its problem :))
--w
vodz
More information about the busybox
mailing list