Path: utzoo!utgpu!cs.utexas.edu!sdd.hp.com!zaphod.mps.ohio-state.edu!samsung!uunet!mcsun!hp4nl!star.cs.vu.nl!maart From: maart@cs.vu.nl (Maarten Litmaath) Newsgroups: alt.sources.d Subject: Re: NON-SOURCE POSTINGS CONSIDERED HARMFUL! Message-ID: <8869@star.cs.vu.nl> Date: 28 Jan 91 18:59:07 GMT References: <24078:Jan2516:52:2591@kramden.acf.nyu.edu> <1991Jan26.091846.25944@convex.com> <1943:Jan2619:34:3591@kramden.acf.nyu.edu> <2856@charon.cwi.nl> Sender: news@cs.vu.nl Reply-To: maart@cs.vu.nl (Maarten Litmaath) Organization: VU Dept. of Computer Science, Amsterdam, The Netherlands Lines: 16 In article <2856@charon.cwi.nl>, dik@cwi.nl (Dik T. Winter) writes: )[...] ) > test -f "$j/$i" && echo -n "$j/$i " As I noted before this will present /etc/passwd as `executable'. Adding a `test -x' will _not_ suffice, because `test' invokes access(2) to test executability, and the answers this system call gives _cannot_ be trusted if the real uid is 0 or if it differs from the effective uid. How does Perl implement `-x', Tom? -- kinnersley@kuhub.cc.ukans.edu (Bill Kinnersley): "Do phonograph turntables turn the other way in Australia?" gjh@krebs.acc.Virginia.EDU (Galen J. Hekhuis): "How do you think satanic messages were discovered on records?"