URGENT: SECURITY: Lynx file browser

From: Dan Trottier <dan@maccs.dcss.mcmaster.ca>
Date: Thu, 27 Nov 1997 11:39:20 -0500
To: "Kevin Traas" <csuite-dev-owner@chebucto.ns.ca>, "Stephen Rice" <steve@freenet.mb.ca>, "John Nemeth" <jnemeth@cue.bc.ca>
Cc: <csuite-dev@chebucto.ns.ca>
Return-Path: <csuite-dev-owner@chebucto.ns.ca>

next message in archive
next message in thread
previous message in archive
previous message in thread
Index of Subjects

Index of Subjects
On Nov 27,  8:20am, "Kevin Traas" wrote:
} Subject: Re: URGENT: SECURITY: Lynx file browser

  [ snip issue of lynx users being able to browse local filesystems ]

> Why not just use rsh?  Or am I missing something here?
> 
> Regards,
> Kevin
> 

Yes. While /usr/lib/rsh restricts your access while at a shell prompt and
when running "cd" interactively and within "shell" scripts it doesn't 
enforce that on applications like "lynx". All applications and in fact
shell scripts found in system directories in the users PATH will still
be able to access directories and files outside the users home directory.

Regards,

dan

-- 
Dan Trottier                                                  dan@mcmaster.ca
Dept of Computer Science & Systems           http://www.dcss.mcmaster.ca/~dan
McMaster University, Hamilton, Ontario                  (905) 525-9140 x23444

next message in archive
next message in thread
previous message in archive
previous message in thread
Index of Subjects