Vulnerability Development mailing list archives

Re: History Files


From: carson () TLA ORG (Carson Gaspar)
Date: Sat, 15 Apr 2000 22:03:42 -0400


"Blue" == Blue Boar <BlueBoar () THIEVCO COM> writes:

Blue> How do you enforce that?
Blue> I'd be a smart ass and point out that you'd have to take away my ability
Blue> to set the execute bit on my own files... can I can always get the
Blue> bin from off-system, and echo blahblah >> ./a.out..

Yup. Many moons ago, at a previous employer, you had to log into a special
machine to get Internet access. Said machine logged you into an environment
where:

- Your umask was 177
- You had no access to the umask feature (nuked from the shell builtins,
  etc.)
- You had an _extremely_ limited command set available, none of which can
  create executeable files.

That's all you had to do to keep the user from putting his/her own code on
the box.

--
Carson Gaspar -- carson () tla org carson () cs columbia edu carson () cugc org
http://www.cs.columbia.edu/~carson/home.html
Queen Trapped in a Butch Body



Current thread: