A possible security bug fix

Douglas mrd at wjh12.UUCP
Sat Jul 23 05:22:26 AEST 1983


Not too long ago there was a news item pointing out the potential 
for working mischief by running programs with file descriptors 0, 
1 or 2 closed - for example, the program could open a file which 
would end up having file descriptor 2, and then write a message 
to standard error, modifying the file.

Would there be any problems with requiring file descriptors 0, 1 and 2
to be open during an exec?  (making an exception for pid 1, so the
initial exec of /etc/init works).



More information about the Comp.unix.wizards mailing list