Bug 845654

Summary: Dumbass attack prevention: Run "killall5" only if the option "--really" has been added
Product: Red Hat Enterprise Linux 6 Reporter: David Tonhofer <bughunt>
Component: sysvinitAssignee: Lukáš Nykrýn <lnykryn>
Status: CLOSED NOTABUG QA Contact: qe-baseos-daemons
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.3   
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-08-04 07:23:14 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description David Tonhofer 2012-08-03 18:22:09 UTC
Description of problem:
=======================

> Work on the root console
> Decide to use "/bin/kill" instead of the bash "kill"
> Edit previous command line, type "/sbin/kil" + TAB + RETURN
> MY FACE WHEN when the last line seen is "/sbin/killall5 -o 30394" and even
  the console goes buh-bye.

Why is this retardation of a command within tab reach?

Solution:
=========

Only have /sbin/killall5 do something if option "--really" given. It's not like this is a wholesome command to run everyday anyway.

Steps to Reproduce:
===================

Hopefully never.

Comment 2 Lukáš Nykrýn 2012-08-04 07:23:14 UTC
Thanks for the report and proposed solution, but this is probably not acceptable, killall5 is still present in some scripts and this change is not quite backward compatible.

And just my opinion it would not be such fun to work as a root without any risk.