R P Herrold wrote: > On Sat, 19 Mar 2005, str tux wrote: > >> I tried to run this: >> >> :(){ :&:;};: >> >> as a non-root user in my CentOS4 >> >> and it bring down my box to its knees. > > > It looks like a longstanding stupid local user geek trick -- where is > the news? A talented local user is a BOFH's worst nightmare and > favorite victim. And don't forget you can ulimit a user. And yes, a real local user is a real pain in the ass if you don't trust him/her. Not to mention the "users" whom runs the commands. Just look at how many times a webserver gain shell and runs scripts etc. after a bug just like the phpBB ones. SELinux helps either way. bye, Ago