[oclug] 2nd try - scripting question

[Vic Gedris]

On Fri, 23 Mar 2001, Greg Sarsons wrote:

> I tried posting this message earlier but I don't see it in my mailbox at
> home so I'm resending it.  Sorry if it is a repeat.
>
> What I'm looking for is advice as to what to use to do the following:
>
> I want to send an email message to a user on a machine who has a process
> running to check incoming email messages.  If the subject line contains
> the correct subject than the script would look in the email message for
> a command to run.  Say 'ls -l' the output of the command is then emailed
> back to the originator.

I'd be really careful with that.  If someone can guess the right
subject, they could easily do an 'rm -rf /' on your system.

You should at least PGP/GPG sign (or better yet, encrypt) the message.

> This small script will be put into a small paper I'm writing for school
> on a covert channel or shell incase you are wondering.

Do you mean it will run in some sort of protected area, so malicious
commands can't actually do anything?

Cheers,
Vic

-- 
------------------------------------------------------------------------
vic at worldwidepunk.com    WORLD WIDE PUNK    http://www.worldwidepunk.com
------------------------------------------------------------------------