-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 7:03 PM -0700 10/16/01, Randal L. Schwartz wrote:
>     This apparently is the case with all setuid root applications... Not
>     good....
>
>heh heh.  Apple hasn't learned what "fork" does. :)

Hmm.  A little experimenting shows that this is also true of 
everything in the Services menu.  Do a find in netinfo.  Enter 
/etc/passwd.  Go to services and select textedit and edit file. 
Works like a charm.

Why do I have the feeling that this is the beginning of a very long 
series of security issues as we break this OS in?
- -- 

Kee Hinckley - Somewhere.Com, LLC
http://consulting.somewhere.com/
[EMAIL PROTECTED] (or ...!alice!nazgul for time travelers :-)

I'm not sure which upsets me more: that people are so unwilling to accept
responsibility for their own actions, or that they are so eager to regulate
everyone else's.

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Security 7.0.3

iQA/AwUBO80GbCZsPfdw+r2CEQLGfQCdEU13GvRPEl9ZIimDQgdOBRWZBDMAn3Ja
oEttz5RoqVmGmaxrpjuTeNv4
=vqyu
-----END PGP SIGNATURE-----

Reply via email to