Home page logo

bugtraq logo Bugtraq mailing list archives

nosymfollow Re: SSH allows deletion of other users files...
From: Jan Grant <Jan.Grant () bristol ac uk>
Date: Wed, 6 Jun 2001 09:51:10 +0100 (BST)

On Mon, 4 Jun 2001, zen-parse wrote:

 [zen () clarity zen]$ rm -r /tmp/ssh-XXW9hNY9/; ln -s / /tmp/ssh-XXW9hNY9

For a long time now I've been mounting /tmp with the "nosymfollow"
option (FreeBSD) - nothing seems to be broken by this, apart from a
whole slew of these kinds of bugs :-)

Apologies for pointing out the obvious; this mount option seems really

jan (expecting a flood of "but it breaks this" mail now)

jan grant, ILRT, University of Bristol. http://www.ilrt.bris.ac.uk/
Tel +44(0)117 9287163 Fax +44 (0)117 9287112 RFC822 jan.grant () bris ac uk
YKYBPTMRogueW... you try to move diagonally in vi.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]