[6044] in RedHat Linux List
Re: problems with /usr/X11/bin/SuperProbe being setuid
daemon@ATHENA.MIT.EDU (Otto Hammersmith)
Mon Nov 25 15:32:47 1996
From: Otto Hammersmith <ohammers@cu-online.com>
To: redhat-list@redhat.com
Date: Mon, 25 Nov 1996 13:35:00 -0600 (CST)
In-Reply-To: <3299D792.58C02330@iceonline.com> from "Borg" at Nov 25, 96 09:29:54 am
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Borg wrote:
>
> Please re-read the underlined line above: of course, any user
> has root priviledges on his/her home computer and can change
> permissions as he pleases and then upload it.
>
The point being that when you un-tar the file, you don't have
permision to create the suid binary. Try it sometime.
BTW, this can be a problem for removable media, like floppies. That's
why by default removable media with the user option has noexec, as
well. That way I can't bring in a suid root shell on a floppy, mount
the floppy and run the shell as root. Note that copying the binary
from the floppy will not work, since the cp prcess doesn't have
permisions to create a file owned by root, and suid.
--
-Otto
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
