Path: utzoo!utgpu!attcan!uunet!husc6!bloom-beacon!tut.cis.ohio-state.edu!cwjcc!hal!ncoast!allbery
From: allbery@ncoast.UUCP (Brandon S. Allbery)
Newsgroups: comp.unix.wizards
Subject: Re: show me
Message-ID: <12116@ncoast.UUCP>
Date: 9 Aug 88 00:16:39 GMT
References: <43200021@uicsrd.csrd.uiuc.edu> <1570005@hpcvlx.HP.COM> <5030@vdsvax.steinmetz.ge.com> <253@quintus.UUCP>
Reply-To: allbery@ncoast.UUCP (Brandon S. Allbery)
Followup-To: comp.unix.wizards
Organization: Cleveland Public Access UN*X, Cleveland, Oh
Lines: 16

As quoted from <253@quintus.UUCP> by ok@quintus.uucp (Richard A. O'Keefe):
+---------------
| It is already the case that some systems refuse to run setuid csh scripts
| unless they have the -b flag, perhaps they should require -f as well:
| 	#!/bin/csh -fb
| so that no .cshrc file will be read.  (Of course there is still chroot plus
| links to watch out for...)
+---------------

Huh??!  Unless your system is *really* broken, you have to be root to do a
chroot().

++Brandon
-- 
Brandon S. Allbery, uunet!marque!ncoast!allbery			DELPHI: ALLBERY
	    For comp.sources.misc send mail to ncoast!sources-misc