On Sun, May 08, 2005 at 06:16:54PM +0300, Yosef Meller wrote:
> 
> As an example to why linux is more sucure, see the latest flaw in
> Firefox: it allows an attacker to create a file on your machine. This
> could be used to create a batch file on windows, or a shell script in
> Linux; however, on Linux shell scripts (or any other file) are not
> executable by default, you have to chmod +x them. 

Well, hmmm...

If you can execute a binary and pass it either parameters or input, then 
'/bin/sh path/to/script' or '/bin/sh <(your custom input)' is basically
equivalent to having an executable script.

Unix has a fine tradition of not making things unnecessarily difficult.

-- 
Tzafrir Cohen         | [EMAIL PROTECTED] | VIM is
http://tzafrir.org.il |                           | a Mutt's  
[EMAIL PROTECTED] |                           |  best
ICQ# 16849755         |                           | friend

=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to