\"special\" shells a security hole?

dave at onfcanim.UUCP dave at onfcanim.UUCP
Fri Feb 20 02:35:11 AEST 1987


In article <1684 at druhi.UUCP> clive at druhi.UUCP (Clive Steward) writes:
>
>    find interestingdir \
>	\( -name Makefile -o -name makefile -o -name \*\.mk \) (etc.) \
>	-exec addshellname {} \;

Unfortunately, it won't find things like "Makefile.v7" and "Makefile.usg"
which are the "master" makefiles for some software.  It also won't
find "makefile.old" or a makefile that is packed into a shar or tar
or compress file.

I'd much prefer to fix make so it behaves in a way that seems reasonable.
Importing SHELL from the environment does not seem reasonable.
(Neither does importing TERMCAP, but at least that doesn't actively
break anything).



More information about the Comp.unix.wizards mailing list