Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!seismo!ut-sally!utah-cs!utah-gr!thomas
From: thomas@utah-gr.UUCP (Spencer W. Thomas)
Newsgroups: net.sources.d
Subject: Re: "sharks" shar checking script
Message-ID: 
Date: Wed, 1-Oct-86 01:44:02 EDT
Article-I.D.: utah-gr.1814
Posted: Wed Oct  1 01:44:02 1986
Date-Received: Thu, 2-Oct-86 21:04:50 EDT
Reply-To: thomas@utah-gr.UUCP (Spencer W. Thomas)
Organization: University of Utah CS Dept
Lines: 17


Unfortunately, this nice idea is insufficient against the determined
system cracker.  In throwing away all the "here" document, it is
ignoring a big hole.  Try the following (works in both csh and sh here):

cat <<eof
`date`
eof

You get the current date on the output.  So your system cracker can
still insert any random command into the 'here' text and sharks will not
detect it.

Oh well.

-- 
=Spencer   ({ihnp4,decvax}!utah-cs!thomas, thomas@utah-cs.ARPA)