Re: Connection Redirection?

• Date: Thu, 22 Feb 1996 14:20:14 PST
• From:
  tom@mvision.com (Tom Ritchford)
• Reply-To:
  tom@mvision.com
• In-Reply-To: <Pine.LNX.3.91.960222165317.19015A-100000@stoopid.res.wpi.edu> (message from Ranalou on Thu, 22 Feb 1996 13:58:27 PST)

Ranalou <ranalou@stoopid.res.wpi.edu> writes:
>Okay, here's a silly question then-
>
>Say I were to implement a verb on myself, @wiz, which of course is 
>wizard-owned and it's sole purpose is to toggle my wizbit.  Save for a 
>few minor things (like @chown, for example), shouldn't this allow me to 
>fully function as a wizard?  Why play with output redirection and 
>'su'-like commands?  I forsee being unable use any verbs written on the 
>wizard player-class, and a potential for a breach in security.  My 
>questions are how inconvenienced would I truly be by not being able to 
>execute those verbs, and how potentially large of a security hole could I 
>open up?

This won't work well.  All the verbs that you own will toggle back and
forth as wiz-privileged as you do.  Which could mean that you will open
a security hole as you enter wiz mode.  But certainly, any verbs you
write that require wiz privileges will cease to function as soon as
you have toggled your wizard bit off.

    /t

Tom Ritchford     tom@mvision.com, tom@weirdos.com

Verge's "Little Idiot" -- Music for the mentally peculiar.
1-800-WEIRDOS           http://www.fly.net/~tom/verge.html

• Re: Connection Redirection?
• From: Ranalou <ranalou@stoopid.res.wpi.edu>

• Prev: Re: Connection Redirection?
• Next: RE: Couple of Questions
• Index: MOO-cows
• Thread: MOO-cows