OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: Re: bin ownership problem

Re: bin ownership problem

Karl Strickland (karlbagpuss.demon.co.uk)
Fri, 20 May 1994 00:21:39 +0100 (BST) 

> we had to change the setuid to bin when we changed the ownership of /etc
> to bin. Otherwise you couldn't use chesstool to break root :-) :-)
> 
> (that was a joke for the smiley impaired btw)

best one I've heard all week :-))

> Lesson;
> Watch out for setuid/setgid programs that allow a shell escape :-) :-\ :-|

And those that dont :-)

------------------------------------------+-----------------------------------
Mailed using ELM on FreeBSD               |                    Karl Strickland
PGP 2.3a Public Key Available.            | Internet: karlbagpuss.demon.co.uk
                                          | or:  karl%mvaxbagpuss.demon.co.uk