in reply to (tye)Re: Is this script safe?
in thread Is this script safe?

NOBODY COPY THAT SCRIPT PLEASE! VERY, VERY BAD SCRIPT. THANKS TO TYE, I SEE THAT THERE ARE SEVERAL WAYS TO FIGHT THAT SCRIPT, MAINLY A "!" in lynx and then a "rm -rf login.pl" in the shell that opens.

THANKS TYE!

Replies are listed 'Best First'.
Re: Re: (tye)Re: Is this script safe?
by Anonymous Monk on May 25, 2001 at 05:02 UTC
    Read the documentation for lynx, specifically the -restrictions part which allows you to disallow things such as executing a shell (lynx -restrictions=shell). There's also no reason why the person executing login.pl would need permission to delete it, so an rm -rf login.pl shouldn't be a concern.

      Actually, "rm -f login.pl" will work no matter the permissions in this specific case as mt2k will own the "login.pl" file (since he obviously isn't an admin on this system).

              - tye (but my friends call me "Tye")