Article View: alt.folklore.computers
Article #623835Re: First use of /sbin in Unix?
From: Scott Lurndal
Date: Thu, 07 Jun 2018 18:45
Date: Thu, 07 Jun 2018 18:45
27 lines
2955 bytes
2955 bytes
Ahem A Rivet's Shot <ste...@eircom.net> writes: >On Thu, 07 Jun 2018 17:22:43 GMT >scott@slp53.sl.home (Scott Lurndal) wrote: > >> Charlie Gibbs <cgibbs@kltpzyxm.invalid> writes: >> >Isn't that considered a security risk? If a bad guy creates a piece > > Yep. > >> >of malware and calls it "ls", it's much easier to slip it into ~/bin >> >than into /bin. >> >> For root, sure. For joe user? Not so much. If someone can access my >> bin directory, all bets are already off. > > Root can access your bin directory and therein lies the risk, if >you can get a sysadmin to inherit your path while trying to solve a >'problem' you've cooked up (eg. by typing su in your session) then you can >get your ls script to run as root - it probably then leaves you a setuid >backdoor and runs the real ls. It used to be a pretty standard student >stunt back in the day. If I were using a system shared with _anyone_ else, I'd worry about it; but that's pretty uncommon outside corporate firewalls. In any case, if someone gets root, again, all bets are already off (su - user, anyone?)
Technical Details
Message-ID:
<M2fSC.300806$ll2.267481@fx35.iad>Path:
mbox-mo1.pugleaf.net!z3-v6ni2545iti.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin1!goblin2!goblin.stu.neva.ru!ecngs!feeder2.ecngs.de!87.79.20.102.MISMATCH!newsreader5.netcologne.de!news.netcologne.de!peer03.ams1!peer.ams1.xlned.com!news.xlned.com!peer03.am4!peer.am4.highwinds-media.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!post01.iad!fx35.iad.POSTED!not-for-mailReferences:
<pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad> <20180607184919.5e8c6085085f0d534adcae85@eircom.net>Show Full Headers
Complete Article Headers
X-Received: by 2002:a6b:849b:: with SMTP id o27-v6mr1363802ioi.100.1528397102286; Thu, 07 Jun 2018 11:45:02 -0700 (PDT) X-BeenThere: alt.folklore.computers@googlegroups.com Received: by 2002:a5e:8714:: with SMTP id y20-v6ls423652ioj.9.gmail; Thu, 07 Jun 2018 11:45:01 -0700 (PDT) X-Received: by 2002:a6b:ce10:: with SMTP id p16-v6mr1240412iob.87.1528397101708; Thu, 07 Jun 2018 11:45:01 -0700 (PDT) MIME-Version: 1.0 Path: mbox-mo1.pugleaf.net!z3-v6ni2545iti.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin1!goblin2!goblin.stu.neva.ru!ecngs!feeder2.ecngs.de!87.79.20.102.MISMATCH!newsreader5.netcologne.de!news.netcologne.de!peer03.ams1!peer.ams1.xlned.com!news.xlned.com!peer03.am4!peer.am4.highwinds-media.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!post01.iad!fx35.iad.POSTED!not-for-mail X-newsreader: xrn 9.03-beta-14-64bit Sender: scott@dragon.sl.home (Scott Lurndal) From: scott@slp53.sl.home (Scott Lurndal) Reply-To: sl...@pacbell.net Subject: Re: First use of /sbin in Unix? Newsgroups: alt.folklore.computers References: <pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad> <20180607184919.5e8c6085085f0d534adcae85@eircom.net> Lines: 27 Message-ID: <M2fSC.300806$ll2.267481@fx35.iad> X-Complaints-To: ab...@usenetserver.com NNTP-Posting-Date: Thu, 07 Jun 2018 18:45:00 UTC Organization: UsenetServer - www.usenetserver.com Date: Thu, 07 Jun 2018 18:45:00 GMT X-Received-Bytes: 2154 X-Received-Body-CRC: 227814318 Bytes: 2442 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit