Re: First use of /sbin in Unix?

Article View: alt.folklore.computers

Article #623836

Back to alt.folklore.computers Previous Next

#623836

From: Ahem A Rivets Shot
Date: Thu, 07 Jun 2018 20:39

42 lines
3640 bytes

On Thu, 07 Jun 2018 18:45:00 GMT
scott@slp53.sl.home (Scott Lurndal) wrote:

> Ahem A Rivet's Shot <ste...@eircom.net> writes:
> >On Thu, 07 Jun 2018 17:22:43 GMT
> >scott@slp53.sl.home (Scott Lurndal) wrote:
> >
> >> Charlie Gibbs <cgibbs@kltpzyxm.invalid> writes:
> >> >Isn't that considered a security risk?  If a bad guy creates a piece
> >
> >	Yep.
> >
> >> >of malware and calls it "ls", it's much easier to slip it into ~/bin
> >> >than into /bin.
> >> 
> >> For root, sure.  For joe user?  Not so much. If someone can access my
> >> bin directory, all bets are already off.
> >
> >	Root can access your bin directory and therein lies the risk, if
> >you can get a sysadmin to inherit your path while trying to solve a
> >'problem' you've cooked up (eg. by typing su in your session) then you
> >can get your ls script to run as root - it probably then leaves you a
> >setuid backdoor and runs the real ls. It used to be a pretty standard
> >student stunt back in the day.
> 
> If I were using a system shared with _anyone_ else, I'd worry about it;
> but that's pretty uncommon outside corporate firewalls.

	True enough - and it is only multi-user systems where there are
unprivileged users unscrupulous enough to try and con their way to root
access.

> In any case, if someone gets root, again, all bets are already off
> (su - user, anyone?)

	The problem is *you* getting root when you're not supposed to.

-- 
Steve O'Hara-Smith                          |   Directable Mirror Arrays
C:\>WIN                                     | A better way to focus the sun
The computer obeys and wins.                |    licences available see
You lose and Bill collects.                 |    http://www.sohara.org/

Technical Details

Message-ID: <20180607213947.32990059a132b116f353a440@eircom.net>

Path:

mbox-mo1.pugleaf.net!f20-v6ni3762itd.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!weretis.net!feeder6.news.weretis.net!feeder4.news.weretis.net!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail

References:

<pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad> <20180607184919.5e8c6085085f0d534adcae85@eircom.net> <M2fSC.300806$ll2.267481@fx35.iad>

Show Full Headers

Complete Article Headers

X-Received: by 2002:a24:4913:: with SMTP id z19-v6mr1807802ita.35.1528405217288;        Thu, 07 Jun 2018 14:00:17 -0700 (PDT)
X-BeenThere: alt.folklore.computers@googlegroups.com
Received: by 2002:a24:1350:: with SMTP id 77-v6ls579961itz.8.gmail; Thu, 07 Jun 2018 14:00:16 -0700 (PDT)
X-Received: by 2002:a24:d643:: with SMTP id o64-v6mr1837589itg.48.1528405216642;        Thu, 07 Jun 2018 14:00:16 -0700 (PDT)
Path: mbox-mo1.pugleaf.net!f20-v6ni3762itd.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!weretis.net!feeder6.news.weretis.net!feeder4.news.weretis.net!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: Ahem A Rivet's Shot <ste...@eircom.net>
Newsgroups: alt.folklore.computers
Subject: Re: First use of /sbin in Unix?
Date: Thu, 7 Jun 2018 21:39:47 +0100
Organization: A noiseless patient Spider
Lines: 42
Message-ID: <20180607213947.32990059a132b116f353a440@eircom.net>
References: <pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad> <20180607184919.5e8c6085085f0d534adcae85@eircom.net> <M2fSC.300806$ll2.267481@fx35.iad>
Mime-Version: 1.0
Injection-Info: reader02.eternal-september.org; posting-host="de5e6af14053f764649c072f2f1ce667"; logging-data="31865"; mail-complaints-to="ab...@eternal-september.org"; posting-account="U2FsdGVkX19hETois7y46MYkx7OVH+uBVovlNr5Zfko="
Cancel-Lock: sha1:6Q/9F13N2/uScgN7/QQV8ywePBk=
X-Newsreader: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd11.1)
X-Clacks-Overhead: "GNU Terry Pratchett"
Bytes: 3260
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Reply to Parent Message