Article View: alt.folklore.computers
Article #623832Re: First use of /sbin in Unix?
From: Ahem A Rivets Shot
Date: Thu, 07 Jun 2018 17:49
Date: Thu, 07 Jun 2018 17:49
26 lines
2898 bytes
2898 bytes
On Thu, 07 Jun 2018 17:22:43 GMT scott@slp53.sl.home (Scott Lurndal) wrote: > Charlie Gibbs <cgibbs@kltpzyxm.invalid> writes: > >Isn't that considered a security risk? If a bad guy creates a piece Yep. > >of malware and calls it "ls", it's much easier to slip it into ~/bin > >than into /bin. > > For root, sure. For joe user? Not so much. If someone can access my > bin directory, all bets are already off. Root can access your bin directory and therein lies the risk, if you can get a sysadmin to inherit your path while trying to solve a 'problem' you've cooked up (eg. by typing su in your session) then you can get your ls script to run as root - it probably then leaves you a setuid backdoor and runs the real ls. It used to be a pretty standard student stunt back in the day. -- Steve O'Hara-Smith | Directable Mirror Arrays C:\>WIN | A better way to focus the sun The computer obeys and wins. | licences available see You lose and Bill collects. | http://www.sohara.org/
Technical Details
Message-ID:
<20180607184919.5e8c6085085f0d534adcae85@eircom.net>Path:
mbox-mo1.pugleaf.net!z3-v6ni2515iti.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin1!goblin3!goblin.stu.neva.ru!news.cs.hut.fi!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mailReferences:
<pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad>Show Full Headers
Complete Article Headers
X-Received: by 2002:a6b:700a:: with SMTP id l10-v6mr1235948ioc.60.1528394405463; Thu, 07 Jun 2018 11:00:05 -0700 (PDT) X-BeenThere: alt.folklore.computers@googlegroups.com Received: by 2002:a24:5c55:: with SMTP id q82-v6ls521701itb.2.gmail; Thu, 07 Jun 2018 11:00:04 -0700 (PDT) X-Received: by 2002:a24:4913:: with SMTP id z19-v6mr1508480ita.35.1528394404796; Thu, 07 Jun 2018 11:00:04 -0700 (PDT) Path: mbox-mo1.pugleaf.net!z3-v6ni2515iti.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin1!goblin3!goblin.stu.neva.ru!news.cs.hut.fi!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail From: Ahem A Rivet's Shot <ste...@eircom.net> Newsgroups: alt.folklore.computers Subject: Re: First use of /sbin in Unix? Date: Thu, 7 Jun 2018 18:49:19 +0100 Organization: A noiseless patient Spider Lines: 26 Message-ID: <20180607184919.5e8c6085085f0d534adcae85@eircom.net> References: <pf6emc$3h2$1@dont-email.me> <ZzzRC.190248$T14.113297@fx44.iad> <pf7ieq$40p$1@tncsrv09.home.tnetconsulting.net> <20180606103538.7eddd3774f5429f1abd54fc6@eircom.net> <XnsA8F990C4CB379admin127001@85.214.115.223> <pf8vvb$oko$1@tncsrv09.home.tnetconsulting.net> <pfbovs02alq@news2.newsguy.com> <DRdSC.264849$Hv4.168085@fx39.iad> Mime-Version: 1.0 Injection-Info: reader02.eternal-september.org; posting-host="de5e6af14053f764649c072f2f1ce667"; logging-data="20843"; mail-complaints-to="ab...@eternal-september.org"; posting-account="U2FsdGVkX18hGKppfPuGV6XztZjA2G2Vm0kZZnBJm28=" Cancel-Lock: sha1:kl3wd3zCf9LVZLUH/9BBU3bezxk= X-Newsreader: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd11.1) X-Clacks-Overhead: "GNU Terry Pratchett" Bytes: 2498 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit