Bugtraq: Re: [linux-security] Things NOT to put in root's crontab

[ken () isis ST 3Com COM (Ken Descoteaux)]

the find -exec {} construct   exec()s the command with the filename
as an argument.  If you can replace the file with a link after find
detects it as a non link. Then the exec will actually operate on the link