4 ms·
That was the result of an additional space in the path passed to rm, IIRC. Though rm /$TARGET where $TARGET is blank is a common enough footgun that --preserve
by extraduder_ire 9mo ago
That was the result of an additional space in the path passed to rm, IIRC.
Though rm /$TARGET where $TARGET is blank is a common enough footgun that --preserve-root exists and is default.
- niyikiza 9mo agoYou'd be surprised to see how often we're seeing those types of semantic attack vulnerabilities in Agent frameworks: https://niyikiza.com/posts/map-territory/ https://niyikiza.com/posts/map-territory/
- cyberax 9mo agoEven better, $TARGET might be "/home/user/documents and settings /bin"
- extraduder_ire 9mo agoI believe that is what staticassertion was suggesting. / is a poor example because of --preserve-root being the default.
- cyberax 9mo agoNot quite. The grandparent's example was missing quotes around $TARGET. Which is yet _another_ footgun. Without quotes it becomes: `rm -Rf /home/user/documents and settings /bin`
- extraduder_ire 9mo agoFound it. is was this line [0] specifically. "rm -rf /usr /lib/nvidia-current/xorg/xorg" instead of "rm -rf /usr/lib/nvidia-current/xorg/xorg", which will delete all of /usr and then fail to delete a non-existent directory at /lib/nvidia-current/xorg/xorg 0: https://github.com/MrMEEE/bumblebee-Old-and-abbandoned/commit/a047be85247755cdbe0acce6f1dafc8beb84f2ac#diff-043df5bdbf6639d7a77e1d44c5226fd7371e5259a1e4df3a0dd5d64c30dca44fL351 https://github.com/MrMEEE/bumblebee-Old-and-abbandoned/commi...