IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

IWETHEY Home / IWETHEY Board / Linux Forum / My guess
Post #17,552
by Steven A S
Picture of Steven A S
11/9/01 3:58:13 PM
Reply
New My guess
Is there a program that is usually set up to clean up the /tmp folder? If such a program were to access a directory of the /tmp dir would it not see that one mangled filename as two separate files (the newline separating them)? Would it not then in deleting the file end up deleting both?

BTW I missed 7 on those, and a few of those I shouldn't have. Doh!
~~~)-Steven----

"I want you to remember that no bastard ever won a war by dying for his country.
He won it by making the other poor dumb bastard die for his country..."

General George S. Patton
Post #17,568
by ben_tilly
11/9/01 4:43:17 PM
Reply
New Bingo
If said cron was written as a shell script using find to produce a list of files to remove, and then removing them, it would be very easy to make exactly that mistake. And, of course, that would have to run as root, so it is able to blow away your password file.

If you wrote it in C, Perl, or any other "real programming language", you would not confuse returns inside of filenames as breaks between filenames.

Cheers,
Ben
     Linux Test - (broomberg) - (21) - Nov. 8, 2001, 11:02:17 PM EST
         Don't hire me. - (Another Scott) - Nov. 9, 2001, 11:27:04 AM EST
         Re: Linux Test - (JayMehaffey) - Nov. 9, 2001, 12:04:45 PM EST
         See the comments at LinuxToday - (ben_tilly) - (12) - Nov. 9, 2001, 01:42:45 PM EST
             I'll bite - (broomberg) - (9) - Nov. 9, 2001, 02:39:48 PM EST
                 So far so good, now for a hint - (ben_tilly) - (8) - Nov. 9, 2001, 03:06:03 PM EST
                     My guess - (Steven A S) - (1) - Nov. 9, 2001, 03:58:13 PM EST
                         Bingo - (ben_tilly) - Nov. 9, 2001, 04:43:17 PM EST
                     gak - (cforde) - (5) - Nov. 10, 2001, 01:05:58 AM EST
                         null and / - (ben_tilly) - (4) - Nov. 10, 2001, 02:15:31 PM EST
                             dont forget pipe and redir | > and your example would be ok - (boxley) - (1) - Nov. 10, 2001, 10:44:44 PM EST
                                 touch 'foo | bar > baz' - (ben_tilly) - Nov. 12, 2001, 04:59:39 AM EST
                             Berkeley, Unix and something else - (cforde) - (1) - Nov. 12, 2001, 01:12:27 AM EST
                                 It is easier to allow than to disallow - (ben_tilly) - Nov. 12, 2001, 05:02:10 AM EST
             I'll bite - (cforde) - (1) - Nov. 9, 2001, 02:57:35 PM EST
                 That sounds wrong - (wharris2) - Nov. 9, 2001, 03:04:53 PM EST
         Unix Review -- can't connect - (kmself) - (1) - Nov. 9, 2001, 05:26:35 PM EST
             Works here - DC area, Nav4/Win32. -NT - (Another Scott) - Nov. 9, 2001, 05:33:50 PM EST
         Heh. - (static) - Nov. 11, 2001, 06:51:46 AM EST
         I thought I didn't know much about Linux... - (Meerkat) - Nov. 11, 2001, 08:19:52 PM EST
         Re: Linux Test - (gdaustin) - Nov. 13, 2001, 02:25:28 PM EST
         Late comer... - (folkert) - Dec. 13, 2001, 11:57:04 PM EST

What? You're not me? I'm sorry, I can't talk to you. Put me on the phone instead.
40 ms