Date: Wed, 26 Jun 1996 20:21:02 -0700 From: "Michael L. VanLoon -- HeadCandy.com" <michaelv@HeadCandy.com> To: -Vince- <vince@mercury.gaianet.net> Cc: "Eric J. Schwertfeger" <ejs@bfd.com>, Mark Murray <mark@grumble.grondar.za>, hackers@freebsd.org, security@freebsd.org, Chad Shackley <chad@mercury.gaianet.net>, jbhunt <jbhunt@mercury.gaianet.net> Subject: Re: I need help on this one - please help me track this guy down! Message-ID: <199606270321.UAA01884@MindBender.HeadCandy.com> In-Reply-To: Your message of Wed, 26 Jun 96 13:55:05 -0700. <Pine.BSF.3.91.960626135432.2935B-100000@mercury.gaianet.net>
next in thread | previous in thread | raw e-mail | index | archive | help
>> > It was a remote login so he had to transfer it over somehow...
>> Well, *if* that's true, it still wouldn't be setuid root just from the
>> transfer. He'd *still* have to get root some other way to make this
>> binary setuid root.
>> But if he's going to do that, why bother copying a binary over the
>> network -- it would just be easier to just snag a copy of your own
>> /bin/sh and mark it setuid root.
> Hmmm, what happens if he tars it first and then sends it over?
Try it. :-) That's the only way to figure all this stuff out...
Seriously, you must be root to create a setuid root file. It doesn't
matter *how* you try to create it.
-----------------------------------------------------------------------------
Michael L. VanLoon michaelv@HeadCandy.com
--< Free your mind and your machine -- NetBSD free un*x >--
NetBSD working ports: 386+PC, Mac 68k, Amiga, Atari 68k, HP300, Sun3,
Sun4/4c/4m, DEC MIPS, DEC Alpha, PC532, VAX, MVME68k, arm32...
NetBSD ports in progress: PICA, others...
Roll your own Internet access -- Seattle People's Internet cooperative.
If you're in the Seattle area, ask me how.
-----------------------------------------------------------------------------
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199606270321.UAA01884>