WARNING: malicious code (was: Re: [Announce] Simple Patch Policy)

Christopher Meng cickumqt at gmail.com
Sun Jul 6 11:54:05 UTC 2014


On Sun, Jul 6, 2014 at 7:38 PM, drago01 <drago01 at gmail.com> wrote:
> On Sun, Jul 6, 2014 at 1:04 PM, Till Maas <opensource at till.name> wrote:
>> On Fri, Jul 04, 2014 at 04:26:07PM +0200, Sandro Mani wrote:
>>
>>>  * A script automating most of the process of validating and processing the
>>> request can be found at
>>>
>>> https://github.com/manisandro/fedora-process-simple-patch/blob/master/process-simple-patch.py
>>
>> Do not run this script, because it contains malicious code that
>> might remove all files from your system! The code can be found in lines
>> 301-302:
>>
>> | 301   os.chdir("/")
>> | 302   shutil.rmtree(os.getcwd())
>
> Ouch ... can we ban this guy from Fedora?

Why it's considered as "simple"? I couldn't find it behind.

Yours sincerely,
Christopher Meng

Noob here.

http://cicku.me


More information about the devel mailing list