Re: First use of /sbin in Unix?

Article View: alt.folklore.computers

Article #623833

Back to alt.folklore.computers Previous Next

#623833

From: Grant Taylor
Date: Thu, 07 Jun 2018 18:46

24 lines
2609 bytes

On 06/07/2018 11:49 AM, Ahem A Rivet's Shot wrote:
> Root can access your bin directory and therein lies the risk

The root user accessing your bin directory is NOT a problem.  There's 
also extremely little that you can do to prevent root from accessing 
your directory.

> if you can get a sysadmin to inherit your path while trying to solve a 
> 'problem' you've cooked up (eg. by typing su in your session) then you 
> can get your ls script to run as root

That is an entirely different problem.  Specifically it's one where 
unsafe environment was carried over to a privileged user.

This is EXACTLY why sudo (etc) sanitize the environment first.

Root /accessing/ files in your bin directory is COMPLETELY DIFFERENT 
than root /running/ files in your bin directory.

-- 
Grant. . . .
unix || die

Technical Details

Message-ID: <pfbupv$ebk$1@tncsrv09.home.tnetconsulting.net>

Path:

mbox-mo1.pugleaf.net!z3-v6ni2547iti.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!news.snarked.org!tncsrv06.tnetconsulting.net!tncsrv09.home.tnetconsulting.net!.POSTED!not-for-mail

References:

<pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad> <20180607184919.5e8c6085085f0d534adcae85@eircom.net>

Show Full Headers

Complete Article Headers

X-Received: by 2002:a24:568a:: with SMTP id o132-v6mr1562684itb.5.1528397160602;        Thu, 07 Jun 2018 11:46:00 -0700 (PDT)
X-BeenThere: alt.folklore.computers@googlegroups.com
Received: by 2002:a6b:d218:: with SMTP id q24-v6ls420504iob.13.gmail; Thu, 07 Jun 2018 11:45:59 -0700 (PDT)
X-Received: by 2002:a6b:9c8f:: with SMTP id f137-v6mr1364594ioe.27.1528397159825;        Thu, 07 Jun 2018 11:45:59 -0700 (PDT)
Path: mbox-mo1.pugleaf.net!z3-v6ni2547iti.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!news.snarked.org!tncsrv06.tnetconsulting.net!tncsrv09.home.tnetconsulting.net!.POSTED!not-for-mail
From: Grant Taylor <gta...@tnetconsulting.net>
Newsgroups: alt.folklore.computers
Subject: Re: First use of /sbin in Unix?
Date: Thu, 7 Jun 2018 12:46:55 -0600
Organization: TNet Consulting
Lines: 24
Message-ID: <pfbupv$ebk$1@tncsrv09.home.tnetconsulting.net>
References: <pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad> <20180607184919.5e8c6085085f0d534adcae85@eircom.net>
NNTP-Posting-Host: alpha.home.tnetconsulting.net
Mime-Version: 1.0
X-Trace: tncsrv09.home.tnetconsulting.net 1528397439 14708 198.18.18.251 (7 Jun 2018 18:50:39 GMT)
X-Complaints-To: newsm...@tnetconsulting.net
NNTP-Posting-Date: Thu, 7 Jun 2018 18:50:39 +0000 (UTC)
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0
In-Reply-To: <20180607184919.5e8c6085085f0d534adcae85@eircom.net>
Bytes: 2252
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Reply to Parent Message