You have been subscribed to a public bug by Kees Cook (keescook):
Make a simple bash script:
#!/bin/bash
# a script called mess.bash
while :
do
date >>/tmp/mess.lst
sleep 1
done
----snip----
Run this interactively and you can tail /tmp/mess.lst until you end the job,
but if you: at -f mess.bash now, then you get something that goes forever and
cannot be stopped by mere mortals, apparently. If you kill with atrm jobno,
that job goes away, but the /tmp/mess.lst continues to be written to until you
reboot. It shows no listing that I am able to discern on ps auxw output. I
have tried it on both server and desktop, and it fails the same way.
Presumably this is a security problem also, as it someone does break in, they
can easily install a worm that will never be seen be either a novice, or a
fairly experienced user like myself.
** Affects: at (Ubuntu)
Importance: Undecided
Status: New
--
at allows starting of scripts that cannot be stopped by user.
https://bugs.launchpad.net/bugs/237233
You received this bug notification because you are a member of Ubuntu Bugs,
which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
