There is a MAJOR flaw with every distrobution of UNIX. If you change your HOME environment variable to "/root" you can succcessfully change to that directory and read (not write) files.
In summary, you can "spy" on the root user. You can get all the files you want.
The newer version (not uploaded, yet) will include functions to change your environment variables, however, we did not intend for the code to be used improperly.
Thank you for reading this.
PS - You can change the permissions on the "/root" folder (if you're super user) so that this flaw doesn't work.
Log in to post a comment.