[32240] in bugtraq
Re: Mac OS X vulnerabilities
daemon@ATHENA.MIT.EDU (gabriel rosenkoetter)
Thu Oct 30 17:57:17 2003
Date: Thu, 30 Oct 2003 16:01:28 -0500
From: gabriel rosenkoetter <gr@eclipsed.net>
To: bugtraq@securityfocus.com
Cc: Lyndon Nerenberg <lyndon@orthanc.ca>
Message-ID: <20031030210128.GQ12294@uriel.eclipsed.net>
Mail-Followup-To: bugtraq@securityfocus.com,
Lyndon Nerenberg <lyndon@orthanc.ca>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="NOl3kBTBh+CNLogO"
Content-Disposition: inline
In-Reply-To: <2147483647.1067521671@[192.168.42.6]>
--NOl3kBTBh+CNLogO
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
[Moderator: I'd say don't bother approving this message, especially
since this argument misses the important point here. Only but I
can't figure out why you approved the one that I'm replying to,
which seems to be suggesting that people go ahead and do something
that I'm pretty sure I'm right in saying that they shouldn't, so...]
On Thu, Oct 30, 2003 at 01:47:51PM -0700, Lyndon Nerenberg wrote:
> On Thursday, October 30, 2003 3:15 PM -0500 gabriel rosenkoetter wrote:
> > find / -perm <something> -exec chmod <somethingelse> {} \;
> No, it's much closer to an 'mtree -U'. Do a 'man diskutil' for details.
And this makes it not be a race condition how, precisely?
I don't have a Mac OS X machine handy, or I would have read the
manual... but I am sitting in front of a NetBSD machine and have
used that operating system quite a bit, so I feel quite comfortable
saying: you should never, ever schedule an mtree -U as root either.
--=20
gabriel rosenkoetter
gr@eclipsed.net
--NOl3kBTBh+CNLogO
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (NetBSD)
iD8DBQE/oXwn9ehacAz5CRoRAggQAJwKB79jpQun0Q3rLoaCxWt5DZ0CggCdFRBU
c9tW7eN+uPnuFXtuYBDYTUo=
=Qo6o
-----END PGP SIGNATURE-----
--NOl3kBTBh+CNLogO--
