[BusyBox] Improving Our Development Process

Vladimir N. Oleynik dzo at simtreas.ru
Wed Jan 24 18:03:22 UTC 2001


Matt Kraai wrote:
 
> I did see this earlier but it must have slipped my mind.  I don't
> see how it is safe, however.  It is trivial for someone to rewrite
> argv when executing this wrapper.  For instance, I could create a
> symlink from /tmp/rm to /bin/ping (which is a hardlink to your
> applet) and then run /tmp/rm -rf / to wipe the harddrive.

Hmm, thanks. Require check arg[0]. Not big code.

I use kernel paths: http://www.openwall.com/linux/
and not have its problem :))


--w
vodz





More information about the busybox mailing list