Re: SUID shell scripts, questions?

woodsncar.ucar.edu

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Pete Hartman: "Re: Re: Need source routing prog"
• Previous message: AMONKdelphi.com: "Re: this list is turning into usless drivel"
• In reply to: That Whispering Wolf...: "SUID shell scripts, questions?"
• Next in thread: Carson Gaspar: "Re: SUID shell scripts, questions?"

>Since starting the shell can take
> a finite amount of time, there's a race condition where you can substitute
> in a different file for the one that originally spawned the shell.

Or you can just create a symlink to a setuid script called "-i". Guess
what happens when the system executes "sh -i"? Don't even need the
race condition. And even without this, you could always overwrite the
SAME file with something new, so the fd doesn't change.

--Greg

• Next message: Pete Hartman: "Re: Re: Need source routing prog"
• Previous message: AMONKdelphi.com: "Re: this list is turning into usless drivel"
• In reply to: That Whispering Wolf...: "SUID shell scripts, questions?"
• Next in thread: Carson Gaspar: "Re: SUID shell scripts, questions?"