> > > Hmm, wonder if the disgruntleds will sue. :-)
> >
> > Who?
> > Really self inflicted isn't it?
> > They've know about this situation for years in earlier MS mailers, but
> > they've failed to develop correct procedures and train staff.
>
> But seriously, folks, what we've all known for years is:
>
> - Take a copy of [.*]x out of the box, install it, and the binary files in
> /usr/bin, /usr/lib, /lib, etc, are world readable, and not world writeable.
> Joe Average User can't launch a virus that writes to a system DLL.
But you don't need write permissions to libs and bins to write a
replicating email virus/worm.
Its been mentioned a few times, the problem is as much about
uneducated users as about the OS.
What if pine detached and ran any shell or perl attachments
automatically, or even if it didn't, what if it was normal
practice for the users to launch any attachments received via
email?
Someone could write a script that emails the virus/worm to everyone
in your address book, /etc/passwd, and searched through your
home directory for any email addresses, and append a line to
.bashrc (perhaps theres a better place which is more portable?)
to do it every time you log in.
You would have to write portable code, etc, but its still possible
if unix users had unsafe email applications or practices.
--
chesty
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
