Article View: alt.folklore.computers
Article #623834Re: First use of /sbin in Unix?
From: Ahem A Rivets Shot
Date: Thu, 07 Jun 2018 20:38
Date: Thu, 07 Jun 2018 20:38
32 lines
3220 bytes
3220 bytes
On Thu, 7 Jun 2018 12:46:55 -0600 Grant Taylor <gta...@tnetconsulting.net> wrote: > On 06/07/2018 11:49 AM, Ahem A Rivet's Shot wrote: > > Root can access your bin directory and therein lies the risk > > The root user accessing your bin directory is NOT a problem. There's > also extremely little that you can do to prevent root from accessing > your directory. Yeah OK I should have said execute stuff in your bin directory. > > if you can get a sysadmin to inherit your path while trying to solve a > > 'problem' you've cooked up (eg. by typing su in your session) then you > > can get your ls script to run as root > > That is an entirely different problem. Specifically it's one where > unsafe environment was carried over to a privileged user. This is the problem cause by having `/bin first in the path which is what was under discussion. > This is EXACTLY why sudo (etc) sanitize the environment first. Yep but not not su which was all that was around when this was a common student stunt. -- Steve O'Hara-Smith | Directable Mirror Arrays C:\>WIN | A better way to focus the sun The computer obeys and wins. | licences available see You lose and Bill collects. | http://www.sohara.org/
Technical Details
Message-ID:
<20180607213809.c1d0d43ca450c550d8650263@eircom.net>Path:
mbox-mo1.pugleaf.net!f20-v6ni3761itd.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin2!goblin.stu.neva.ru!aioe.org!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mailReferences:
<pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad> <20180607184919.5e8c6085085f0d534adcae85@eircom.net> <pfbupv$ebk$1@tncsrv09.home.tnetconsulting.net>Show Full Headers
Complete Article Headers
X-Received: by 2002:a6b:6705:: with SMTP id b5-v6mr1555937ioc.35.1528405215920; Thu, 07 Jun 2018 14:00:15 -0700 (PDT) X-BeenThere: alt.folklore.computers@googlegroups.com Received: by 2002:a24:54c5:: with SMTP id t188-v6ls571506ita.0.canary-gmail; Thu, 07 Jun 2018 14:00:15 -0700 (PDT) X-Received: by 2002:a24:2f05:: with SMTP id j5-v6mr1816990itj.37.1528405215085; Thu, 07 Jun 2018 14:00:15 -0700 (PDT) Path: mbox-mo1.pugleaf.net!f20-v6ni3761itd.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin2!goblin.stu.neva.ru!aioe.org!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail From: Ahem A Rivet's Shot <ste...@eircom.net> Newsgroups: alt.folklore.computers Subject: Re: First use of /sbin in Unix? Date: Thu, 7 Jun 2018 21:38:09 +0100 Organization: A noiseless patient Spider Lines: 32 Message-ID: <20180607213809.c1d0d43ca450c550d8650263@eircom.net> References: <pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad> <20180607184919.5e8c6085085f0d534adcae85@eircom.net> <pfbupv$ebk$1@tncsrv09.home.tnetconsulting.net> Mime-Version: 1.0 Injection-Info: reader02.eternal-september.org; posting-host="de5e6af14053f764649c072f2f1ce667"; logging-data="31865"; mail-complaints-to="ab...@eternal-september.org"; posting-account="U2FsdGVkX1+djOUCwUxw8GS54upPdc6Jq9ao2etQa8Y=" Cancel-Lock: sha1:abfBr6THWti9Nx+nB5yXAx9DuEU= X-Newsreader: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd11.1) X-Clacks-Overhead: "GNU Terry Pratchett" Bytes: 2818 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit