From owner-freebsd-hackers Thu Nov 16 10:14:42 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from mail.enteract.com (mail.enteract.com [207.229.143.33]) by hub.freebsd.org (Postfix) with ESMTP id 41B2537B479 for ; Thu, 16 Nov 2000 10:14:40 -0800 (PST) Received: from shell-2.enteract.com (dscheidt@shell-2.enteract.com [207.229.143.41]) by mail.enteract.com (8.9.3/8.9.3) with SMTP id MAA33932; Thu, 16 Nov 2000 12:14:32 -0600 (CST) (envelope-from dscheidt@enteract.com) Date: Thu, 16 Nov 2000 12:14:31 -0600 (CST) From: David Scheidt To: void Cc: Stefan `Sec` Zehl , Peter Pentchev , freebsd-hackers@freebsd.org Subject: Re: changing a running process's credentials In-Reply-To: <20001116173016.B22216@firedrake.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, 16 Nov 2000, void wrote: :Does anyone remember the article in Phrack, issue 53 I think, about :speaking Forth to a Sun's boot-prom in order to write a '0' into the UID :member of one's shell's struct proc? Yes. It works a treat. Similar steps let you do the same thing with DDB or (presumably, haven't tried) remote gdb. David To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message