Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!ncar!ames!dftsrv!iris613!merritt
From: merritt@iris613.gsfc.nasa.gov (John H Merritt)
Newsgroups: comp.sys.sgi
Subject: Re: IRIX 3.2: new directory blocks not zeroed?
Message-ID: <905@dftsrv.gsfc.nasa.gov>
Date: 16 Feb 90 04:31:41 GMT
References: <90Feb15.191156est.6155@neat.cs.toronto.edu>
Sender: news@dftsrv.gsfc.nasa.gov
Reply-To: merritt@iris613.UUCP (John H Merritt)
Organization: Goddard Space Flight Center Climate and Radiation Branch
Lines: 22

In article <90Feb15.191156est.6155@neat.cs.toronto.edu> ken@cs.toronto.edu (Ken Lalonde) writes:
>
>	% cd /tmp
>	% cp /etc/passwd .		# any large text file will do
>	% rm passwd
>	% mkdir foo
>	% cat -v foo
>
>Bad news if you care about filesystem security.

Poor example, but the point is illustrated.  I could not read
the Ex.... files that 'vi' uses with the above technique.  What I could
do was read part of someone elses (mode 600) file that was placed there
and removed.  So we need a deamon that sits in /tmp waiting for files
to be deleted :-),  How do we monitor /tmp files?  No! No! No! don't
answer this; this discussion showed up in comp.unix.wizards.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
John H. Merritt                   #  Yesterday I knew nothing,
Applied Research Corporation      #  Today I know that.
merritt@iris613.gsfc.nasa.gov     #