Re: The sick power!
Re: The sick power!
- Subject: Re: The sick power!
- From: Rosyna <email@hidden>
- Date: Fri, 7 Dec 2001 14:29:52 -0700
You bring an interesting point up. However, I am not sure how'd you
exploit it through applescript. AppleScript can only do what the
application can do through its GUI. So you have no real power that
the GUI doesn't have.
Sending this to an instance of BBEdit running as root causes
LaunchCFMApp to crash:
tell application "BBEdit 6.5"
delete (file of text document 1)
end tell
Ack, at 12/7/01, Ondra Cada said:
>
>>>>>> Rosyna (R) wrote at Thu, 6 Dec 2001 02:10:49 -0700:
>
R> I wonder if this will have any security exploits.
>
>
Just try to control an application which runs as root from a non-root
>
script... if possible, there's a problem. If possible remotely, there's a BIG
>
problem.
--
Sincerely,
Rosyna Keller
Technical Support/Holy Knight/Always needs a hug
Unsanity: Unsane Tools for Insane People