[Gllug] SULOG

Dean dean.wilson3 at virgin.net
Fri Nov 2 12:54:00 UTC 2001


On Fri, Nov 02, 2001 at 11:29:31AM -0000, Jackson, Harry wrote:
> #! /bin/bash
> echo $HOME >> /tmp/.suid_log
> suid
 
> This would be easy to get around though but if they ls the bin directory

It would also be easy to nuke the log file. You'd have to have quite open
permissions on the log file. I was thinking about something like 600 since
root is the owner. Thinking about it though you could use chattr +a...

	Dean
-- 
Profanity is the one language all programmers understand
   --- Anon

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list