Path: utzoo!mnetor!uunet!husc6!mailrus!ames!pacbell!att-ih!ihnp4!ihlpf!nevin1 From: nevin1@ihlpf.ATT.COM (00704a-Liber) Newsgroups: comp.bugs.sys5 Subject: Re: A security hole Message-ID: <4212@ihlpf.ATT.COM> Date: 31 Mar 88 00:19:30 GMT References: <181@wsccs.UUCP> <722@rivm05.UUCP> <478@minya.UUCP> <892@cosmo.UUCP> <175@pcsbst.UUCP> <544@fig.bbn.com> Reply-To: nevin1@ihlpf.UUCP (00704a-Liber,N.J.) Organization: AT&T Bell Laboratories - Naperville, Illinois Lines: 12 In article <544@fig.bbn.com> rsalz@bbn.com (Rich Salz) writes: .Every single program that is subject to the "IFS" trick can be .protected by written a wrapper that sets the environment properly, .then calls the real program. But what stops the user from bypassing the wrapper and calling the real program directly? -- _ __ NEVIN J. LIBER ..!ihnp4!ihlpf!nevin1 (312) 510-6194 ' ) ) "The secret compartment of my ring I fill / / _ , __o ____ with an Underdog super-energy pill." / (_