|
On Tue, 2006-03-14 at 17:59 -0700, James Rich wrote: > On Tue, 14 Mar 2006, Scott Klement wrote: > > > I added support for STRPCCMD (a command sent to the PC through the 5250 > > data stream) to lib5250. I just finished committing the changes. > > I just looked at the code. Maybe this is a dumb idea, but would it be > good to check that the command to be run isn't going to do some damage to > the system? For example, if running as root perhaps tn5250 could refuse > to enable the STRPCCMD support, regardless of the config (obviously with a > message telling what is going on)? Simple. Rule 1 of linux/unix - never run as root. I really like the idea that it has to be enabled in the config file. If one is silly enough to create a /root/.tn5250rc file AND enable remote commands, then I think one may indeed get what one deserves. Regards, Rich
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.