On Friday 21 June 2002 15:17, Hans van Zijst wrote:
setuid means that the program will be run under the uid of the
owner of the file, instead of the uid of the person who started it.
The command "/bin/sh" is owned by root, but if user "mario" would
start it, it would be run under his id. Now if root makes it setuid
(with "chmod o+s /bin/sh" or "chmod 04755 /bin/sh", that's about
the same), the shell is run as root, even if mario starts it. Which
means that if mario runs the shell, he has root-privileges.
Erhm, *blush*, change the "o+s" to "u+s", makes quite a difference :)
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail