[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Re: security risk... is this normal?



Do you have any examples? Uninstaller script only remove packages installed by RPM, so it is only rpm -e. What other DANGEROUS commands do they have? mv, rm?

Just thinking off the top of my head, but don't most (all?) of the uninstallers do a "self remove" of the .uninst and the .mdtlst files when they are done executing, on the assumption that the preceding steps went as planned?

If so, I guess it would be possible to run the uninstall script, have the RPM removal fail, but the rm of the .uninst script work ok, leaving you with no uninstall script for the PKG. Not life threatening, but makes it difficult to remove a PKG for real...