Subject: Re: security/7060: find and rm
To: Todd C. Miller <Todd.Miller@courtesan.com>
From: Chris Jones <cjones@rupert.honors.montana.edu>
List: netbsd-bugs
Date: 03/01/1999 10:36:23
>>>>> "Todd" == Todd C Miller <Todd.Miller@courtesan.com> writes:

>> Chdirs should never be down more than one level.  It ought to be
>> possible to compare the inodes of parent after the chdir to ensure
>> nothing unsafe happened.

Todd> I made changes to OpenBSD's find(1) (and fts(3)) to do this a
Todd> few years ago.  I called it '-execdir' for exec in the current
Todd> dir.  For this to be safe fts(3) needs some minor modifications
Todd> as well, which NetBSD may or may not already have.

Cool.  I presume you haven't discovered any new problems that this
causes?  'execdir' sounds like a better name than 'execsafe,' IMHO.

Chris

-- 
-----------------------------------------------------cjones@math.montana.edu
Chris Jones                                          cjones@honors.montana.edu
           Mad scientist at large                    cjones@nervana.montana.edu
"Is this going to be a stand-up programming session, sir, or another bug hunt?"