[TUHS] Set-uid shell scripts

[Alec Muffett]

On Sun, 4 Aug 2019 at 08:37, Dave Horsfall <dave at horsfall.org> wrote:

> Is it just me, or did someone actually implement set-uid scripts?


Yes, they were a thing for a while, until someone realised that you could
do:

ln -s /bin/scriptname ./-i
"-i" # assuming that "." is already in your path

...and get a root shell.  Source: I did this on (ISTR) 4.1 or 4.2BSD.

    -a

-- 
http://dropsafe.crypticide.com/aboutalecm
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://minnie.tuhs.org/pipermail/tuhs/attachments/20190804/7e61d0aa/attachment.html>