Subject: Re: Addition to force open to open only regular files
To: NetBSD Kernel Technical Discussion List <tech-kern@NetBSD.ORG>
From: Ignatios Souvatzis <is@beverly.kleinbus.org>
List: tech-kern
Date: 11/30/2000 23:45:54
On Thu, Nov 30, 2000 at 05:31:35PM -0500, Greg A. Woods wrote:
> Well, yeah, but if you can get control over your own original UID, then
> exactly what have you gained?
Think "email reader".
If a student can send my boss an email that will cause his email
reader to execute the students code, he can gain access to my bosses
data. Say, LaTeX file with next weeks' test.
Not good.
-is