Re: Multiple vendors FTP denial of service

[peterw]

At Wed, 21 Mar 2001 00:55:03 +0200 , Stefan Laudat <[EMAIL PROTECTED]> wrote:

>.... and as a quick fix for nasty shell users having bash prompts on your machine, 
>just
>enter 'set -f' in the /etc/profile.

...which users can override with 'set +f'

>Of course, until we will get a fixed bash or
>a fixed libc(?).

Oh, please. Then the user writes/gets an app that abuses the system
in another way. As another reader mentioned, for shells this is a resource
limit problem, and attacking /bin/sh is the *wrong* way to "fix" the
local exploit concerns.

-Peter