Re: First use of /sbin in Unix?

Article View: alt.folklore.computers

Article #623832

Back to alt.folklore.computers Previous Next

#623832

From: Ahem A Rivets Shot
Date: Thu, 07 Jun 2018 17:49

26 lines
2898 bytes

On Thu, 07 Jun 2018 17:22:43 GMT
scott@slp53.sl.home (Scott Lurndal) wrote:

> Charlie Gibbs <cgibbs@kltpzyxm.invalid> writes:
> >Isn't that considered a security risk?  If a bad guy creates a piece

	Yep.

> >of malware and calls it "ls", it's much easier to slip it into ~/bin
> >than into /bin.
> 
> For root, sure.  For joe user?  Not so much. If someone can access my
> bin directory, all bets are already off.

	Root can access your bin directory and therein lies the risk, if
you can get a sysadmin to inherit your path while trying to solve a
'problem' you've cooked up (eg. by typing su in your session) then you can
get your ls script to run as root - it probably then leaves you a setuid
backdoor and runs the real ls. It used to be a pretty standard student
stunt back in the day.

-- 
Steve O'Hara-Smith                          |   Directable Mirror Arrays
C:\>WIN                                     | A better way to focus the sun
The computer obeys and wins.                |    licences available see
You lose and Bill collects.                 |    http://www.sohara.org/

Technical Details

Message-ID: <20180607184919.5e8c6085085f0d534adcae85@eircom.net>

Path:

mbox-mo1.pugleaf.net!z3-v6ni2515iti.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin1!goblin3!goblin.stu.neva.ru!news.cs.hut.fi!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail

References:

<pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad>

Show Full Headers

Complete Article Headers

X-Received: by 2002:a6b:700a:: with SMTP id l10-v6mr1235948ioc.60.1528394405463;        Thu, 07 Jun 2018 11:00:05 -0700 (PDT)
X-BeenThere: alt.folklore.computers@googlegroups.com
Received: by 2002:a24:5c55:: with SMTP id q82-v6ls521701itb.2.gmail; Thu, 07 Jun 2018 11:00:04 -0700 (PDT)
X-Received: by 2002:a24:4913:: with SMTP id z19-v6mr1508480ita.35.1528394404796;        Thu, 07 Jun 2018 11:00:04 -0700 (PDT)
Path: mbox-mo1.pugleaf.net!z3-v6ni2515iti.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin1!goblin3!goblin.stu.neva.ru!news.cs.hut.fi!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: Ahem A Rivet's Shot <ste...@eircom.net>
Newsgroups: alt.folklore.computers
Subject: Re: First use of /sbin in Unix?
Date: Thu, 7 Jun 2018 18:49:19 +0100
Organization: A noiseless patient Spider
Lines: 26
Message-ID: <20180607184919.5e8c6085085f0d534adcae85@eircom.net>
References: <pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad>
Mime-Version: 1.0
Injection-Info: reader02.eternal-september.org; posting-host="de5e6af14053f764649c072f2f1ce667"; logging-data="20843"; mail-complaints-to="ab...@eternal-september.org"; posting-account="U2FsdGVkX18hGKppfPuGV6XztZjA2G2Vm0kZZnBJm28="
Cancel-Lock: sha1:kl3wd3zCf9LVZLUH/9BBU3bezxk=
X-Newsreader: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd11.1)
X-Clacks-Overhead: "GNU Terry Pratchett"
Bytes: 2498
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Reply to Parent Message