Re: chown udført af normal bruger

From: Michael Knudsen (none@e--molioner.dk.lh.bsd-dk.dk)
Date: Tue 02 Nov 2004 - 14:33:00 CET


Date: Tue, 2 Nov 2004 14:33:00 +0100
From: Michael Knudsen <none@e--molioner.dk.lh.bsd-dk.dk>
To: bsd-dk@bsd-dk.dk
Subject: Re: chown udført af normal bruger

Quoting Phil Regnauld (regnauld@starBSD.org):
> On Tue, Nov 02, 2004 at 01:36:03AM +0100, Michael Rasmussen wrote:
> > >
> > Kunne man gøre følgende med sudo uden at kompromittere sikkerheden for
> > hårdt?
> > www ALL= NOPASSWD: /sbin/chown
>
> nobody@localhost $ sudo chown nobody /boot/kernel/kernel
> nobody@localhost $ cp trojan_kernel /boot/kernel/kernel

Tsk tsk, Phil, der laegger man altsaa ikke sin kerne paa rigtige BSDer. :)

-- 
Winter meant the coming of the lazy wind, which couldn't be bothered to
blow around people and blew right through them instead.
-- (Terry Pratchett, Wyrd Sisters)



This archive was generated by hypermail 2b30 : Wed 15 Nov 2006 - 18:24:46 CET