RE: Yes..., I can destroy your system!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




> -----Original Message-----
> From: Michael Kuss [mailto:kuss@pi.infn.it]
> Sent: Mon, January 20, 2003 10:55 PM
> To: psyche-list@redhat.com
> Subject: Re: Yes..., I can destroy your system!
> 
> 
> On Sun, 19 Jan 2003, zhiren wrote:
> 
> > Really interesting! Let me prove it, so you can see it for yourself:
> > 
> > 1. Let's create a file name asdf in your home folder;
> > 2. Then (1) start OpenOffice, (2) Alt-T-M to open the macro dialog,
> > and enter this code:
> >       Sub AViciousCode
> >          Shell( "rm -rf ./asdf",2)
> >       end sub
> > 3. Now run it to see your asdf file has gone!
> 
> well, something to think about.  However, your system is only 
> gone if you 
> do this a root.  If I remember right, there is a warning 
> popping up if you 
> use root with gnome.  I don't know surely, because I 'su' always.

I think Lindows users should really be worried about this.

> 
> However, for the user files you seem to be right, and I don't 
> know how you 
> can check beforehand if a document contain a macro like this, 
> which might 
> be executed when opening it.  I'm a little worried, because I 
> quite often 
> have to open ppt and/or sdd files which are not mine.  Any advices?
> 
> Cheers,
> 
> Michael

I wonder if it is possible to make a list of potentially dangerous functions
(like "Shell") and allow users to enable them (disable them by default) or
warn user when macro attempts to execute such functions.

> 
> 
> 
> 
> 
> -- 
> Psyche-list mailing list
> Psyche-list@redhat.com
> https://listman.redhat.com/mailman/listinfo/psyche-list
> 



-- 
Psyche-list mailing list
Psyche-list@redhat.com
https://listman.redhat.com/mailman/listinfo/psyche-list

[Index of Archives]     [Fedora General Discussion]     [Red Hat General Discussion]     [Centos]     [Kernel]     [Red Hat Install]     [Red Hat Watch]     [Red Hat Development]     [Red Hat 9]     [Gimp]     [Yosemite News]

  Powered by Linux