From mboxrd@z Thu Jan 1 00:00:00 1970 Received: by archone.tamu.edu id <18907>; Thu, 12 Dec 1991 10:30:08 -0600 From: Byron Rakitzis To: rc Subject: Re: a tricky question Message-Id: <91Dec12.103008cst.18907@archone.tamu.edu> Date: Thu, 12 Dec 1991 09:58:56 -0600 I just thought of a hole: importing functions from the environment. e.g., foo: #!/bin/rc -- echo hi can be foiled with ; fn echo {/bin/sh} ; foo or even #!/bin/rc -- exec mount /pcfs can be foiled with ; fn exec {/bin/sh} ; foo Then again, Duff mentions "-p" in one of the rc papers, so this one does not get any credit. Might it be worth adding "-p" to rc, or would it encourage a false sense of security? I guess that's what I am driving at.