Re: cleaning up /var/tmp

[Daniel Quinlan <quinlan@pathname.com>]

Philippe Troin <phil@fifi.org> writes:

> There's commented code in the /etc/cron.something-ly to clean /tmp
> regularly, but it's not activated because of the find+xargs security
> bug (where a carefully crafted enough filename can cause programs to
> be executed by the UID running find+xargs).

Are you sure that's the case?

# /usr/bin/find /tmp -mindepth 1 -maxdepth 1 -print0 | \
  /usr/bin/xargs --null rm -rf

- Dan

Received: (qmail 4513 invoked by uid 888); 26 Mar 1997 10:02:12 -0000
Delivered-To: debian-lists--user@master.debian.org
Received: (qmail 4509 invoked by uid 888); 26 Mar 1997 10:02:12 -0000
Delivered-To: debian-user@debian.org
Received: (qmail 4492 invoked from network); 26 Mar 1997 10:02:11 -0000
Received: from nw31.netwave.ca (HELO weasel.pisys.com) (root@204.101.215.31)
  by master.debian.org with SMTP; 26 Mar 1997 10:02:10 -0000
Received: from weasel.pisys.com ([210.208.9.100]) by weasel.pisys.com
	 with smtp id m0w9oyZ-000TbtC
	(Debian /\oo/\ Smail3.1.29.1 #29.37); Wed, 26 Mar 97 04:26 EST
Message-ID: <3338F3F8.5403@pisys.com>
Date: Wed, 26 Mar 1997 05:01:28 -0500
From: Peter Iannarelli <peter@pisys.com>
Reply-To: peter@pisys.com
Organization: GenX Internet Laboratories
X-Mailer: Mozilla 3.0Gold (Win95; U)
MIME-Version: 1.0
To: "R. Chris Ross" <RCROSS@seitz.com>
CC: debian-user@debian.org
Subject: Re: PPPproblem
References: <F8716A2F01CC1200@seitz.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

R. Chris Ross wrote:
>
>      At other places amd at the end there are ppp.log entries that
> say the line is not 8 bit clear and that bit 7 is 0.  What does this
> mean?  At some point my ISP's system was taken out of service for
> maintainance but it may have been at that point that I started
> recieving this second error.
> 
>      Any help would be greatly appriciated.
> 
>      Chris

Hi Chris:

I may be able to help you. I've seen that "8 bit clear" problem
before when one does not specify their service type in
/etc/ppp.chatscript. To determine what your ISP will transmit 
and expect, dialup and login you ISP manually. Following is
an example of my ppp.chatscript.

ABORT        BUSY
ABORT        "NO CARRIER"
ABORT        VOICE
ABORT        "NO DIALTONE"
""           ATDT214-6222
name         vh119001
word         \qabcdefg\q
vice         ppp           <--- notice this line.****

**** my service provider requests a service type, I must answer
     with a ppp to start negotiation. Please note that the strings
     which may be received from you ISP may vary.

This may be the case with you ISP as well. If I leave the last line
out, I will get the "8 bit clear" error in my log file.


	regards


	Peter Iannarelli