Re: Command injection in /etc/rc.d/netif

hello why is this a security issue, if an unauthenticated user has permission to modify an rc script then that's on the sysadmin that gave such permission,not on the system,and i don't see any realistically possible scenario where without explicit consent from the root user to modify a rc script as such someone would maliciously be able to be modify as such, and if someone is explicitly allowed to modify a rc script as such then at that point that's not an issue about how the rc script is written it's about trust as you can make a shell script that launches at boot do anything, so clarify please what's wrong with the rc script?