It's ok, but it has several points.
First, an user will not be able to see his own deleted files.
Second, an user who already knows the name of a file, can delete it from
the wastebasket.
Another solution would be to create a wastebasket for each user, in his
home directory, with read and write permision for him.


David Knaack wrote:

> Greetings,
>
> After a recent successful script kiddie attack where the
> kiddie deleted his tools, it occured to me that on my system
> it would be useful to have functionality similar to the windows
> recycle bin.  To achieve this I would like to replace 'rm' with
> a simple script that just moves files to a temp directory where
> files will age before being automaticly deleted.
>
> Since all users would use this function, no users should be
> able to 'dumpster dive', to examine discarded files.  I think
> this is easily acomplished simply by making the directory
> world writeable, but not readable.
>
> Am I missing any major security concerns with this scheme?
>
> Thanks
> DK
> --
> "When you pay off the first baseman every month, who gets the money?"
> "Every dollar of it."                  --Who's on First?

--
        Juan Sales
        Rio de Janeiro
        [EMAIL PROTECTED]
        www.manya.org



Reply via email to