What to do about rcmdsh(3) ?

O'Connor, Daniel darius at dons.net.au
Sun Jul 1 08:06:15 UTC 2018



> On 1 Jul 2018, at 13:12, Eitan Adler <lists at eitanadler.com> wrote:
>> You could just leave the call, I assume it will fail with an error if rsh isn't in the path.
> 
> It will fail unconditionally since the call looks explicitly for
> /bin/rsh. Is it wrong to change the implementation to use PATH?I have
> not looked closely, but are there security implications to trusting
> the environment?

Hmm I see..
I think it could still be OK if the hypothetical rsh port had an option to add a symlink to /bin.

--
Daniel O'Connor
"The nice thing about standards is that there
are so many of them to choose from."
 -- Andrew Tanenbaum




More information about the freebsd-arch mailing list