Re: WARNING: malicious code

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, 2014-07-06 at 13:48 +0200, Reindl Harald wrote:
> 
> Am 06.07.2014 13:41, schrieb Sandro Mani:
> > On 06.07.2014 13:38, drago01 wrote:
> >> On Sun, Jul 6, 2014 at 1:04 PM, Till Maas <opensource@xxxxxxxxx> wrote:
> >>> On Fri, Jul 04, 2014 at 04:26:07PM +0200, Sandro Mani wrote:
> >>>
> >>>>   * A script automating most of the process of validating and processing the
> >>>> request can be found at
> >>>>
> >>>> https://github.com/manisandro/fedora-process-simple-patch/blob/master/process-simple-patch.py
> >>> Do not run this script, because it contains malicious code that
> >>> might remove all files from your system! The code can be found in lines
> >>> 301-302:
> >>>
> >>> | 301   os.chdir("/")
> >>> | 302   shutil.rmtree(os.getcwd())
> >> Ouch ... can we ban this guy from Fedora?
> >
> > This is a bit dramatic. I really sincerely apologize for this and please 
> > realize that I wrote this with the best
> > intentions. I've fixed the issue...
> 
> how can a "rm -rf currentdir" happen by accident?
> and that combined with make / to the current dir?
> 
> line 302 is a no-go in general
> line 301 before that smells like intention
> 
> i can't imagine that two lines together happen by mistake

That may well be an issue with your imagination (or even experience). As
for me, I'm struggling to imagine why would anyone do that
intentionally.

I think (and hope) lot of us would be very unhappy if  manage to build
an environment where hastily punish people for mistakes or suspicions in
a mob-like manner. Please give the guy a break and don't jump into too
quick judgments.

Lubo

-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux