Re: Connection Redirection?

• Date: Thu, 22 Feb 1996 14:27:38 PST
• From:
  Don Schwarz <don@darkowl.pr.mcs.net>
• Reply-To:
  darkowl@mcs.net
• Cc: moo-cows@parc.xerox.com
• Content-Type: TEXT/PLAIN; charset=US-ASCII
• In-Reply-To: <Pine.LNX.3.91.960222165317.19015A-100000@stoopid.res.wpi.edu>

On Thu, 22 Feb 1996, Ranalou wrote:

> Say I were to implement a verb on myself, @wiz, which of course is 
> wizard-owned and it's sole purpose is to toggle my wizbit.  Save for a 
> few minor things (like @chown, for example), shouldn't this allow me to 
> fully function as a wizard?  Why play with output redirection and 
> 'su'-like commands?  I forsee being unable use any verbs written on the 
> wizard player-class, and a potential for a breach in security.  My 
> questions are how inconvenienced would I truly be by not being able to 
> execute those verbs, and how potentially large of a security hole could I 
> open up?
> 
Well, first of all, all the verbs you own would now run with wizperms,
creating *lots* of security holes and possibly causing some badly written
code to break.

 *****************************************************************************
 *         Don Schwarz <darkowl@mcs.net>           *     PGP fingerprint:    *
 *          http://www.mcs.net/~darkowl            * 6E 3E B9 38 CC C2 CA CD *
 * -->Come to EnigMOO  (junior.wariat.org 7777)<-- * 4A ED 48 66 27 FA 1C 37 *
 *     Dark_Wiz @ EnigMOO, ForestMOO, MOOnShine    ***************************
 *  Dark_Owl @ everymoo          "The mice will see you now."  --HHGTTG      *
 *****************************************************************************

• Re: Connection Redirection?
• From: Ranalou <ranalou@stoopid.res.wpi.edu>

• Prev: Re: Connection Redirection?
• Next: Re: Connection Redirection?
• Index: MOO-cows
• Thread: MOO-cows