[TUHS] Set-uid shell scripts

Alec Muffett alec.muffett at gmail.com
Sun Aug 4 17:43:24 AEST 2019

On Sun, 4 Aug 2019 at 08:37, Dave Horsfall <dave at horsfall.org> wrote:

> Is it just me, or did someone actually implement set-uid scripts?

Yes, they were a thing for a while, until someone realised that you could

ln -s /bin/scriptname ./-i
"-i" # assuming that "." is already in your path

...and get a root shell.  Source: I did this on (ISTR) 4.1 or 4.2BSD.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://minnie.tuhs.org/pipermail/tuhs/attachments/20190804/7e61d0aa/attachment.html>

More information about the TUHS mailing list