Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!wuarchive!uunet!rbj From: rbj@uunet.UU.NET (Root Boy Jim) Newsgroups: comp.unix.wizards Subject: Re: Slashes in filenames? Message-ID: <123382@uunet.UU.NET> Date: 19 Feb 91 23:48:12 GMT References: <26038@adm.brl.mil> <15236@smoke.brl.mil> Organization: UUNET Communications Services, Falls Church, VA Lines: 24 In article <15236@smoke.brl.mil> gwyn@smoke.brl.mil (Doug Gwyn) writes: ?In article thurlow@convex.com (Robert Thurlow) writes: ?>... other things like the server permitting mknod()s by non-root ?>users are still being found. ? ?Oooh, this is bad news indeed. If exploited, it basically completely ?circumvents all UNIX security features. Well, Doug, let me say it for/with you: NFS is a crock. Remember when "NFS didn't do devices"? Now it does. The wrong way. If I have a di?kless workstation (and friends, in spite of all my previous howling, I do), guess where my devices are? On the SERVER's disk! So my requests for devices on IT's disk refer to MY machine! Are we having fun yet? The mknod bug has been fixed. However, if you can get a user account on someone's machine and get them to mount your disk... Guy Harris wants "nosuid" to also mean "nodev" as well. -- [rbj@uunet 1] stty sane unknown mode: sane