slack 7 & ppp

[Michalis Kabrianis]

On 10-Nov-99 DJ Art wrote:
> Michalis Kabrianis wrote:
> 
>> an kaneis ena programma suid simainei oti otan ekteleitai, ekteleitai me ta
>> priviledges tou owner, kai oxi opoiou to trexei.
> 
> Ο owner των συγκεκριμένων εκτελέσιμων είναι o root. Εγώ ρωτάω αν υπάρχει
> περίπτωση να υπάρξει τρύπα, με το να κάνω τα εκτελέσιμα του xisp suid.
> Αν ναι, να τα κάνω r-x από others ...
> 
Den to katalabes. Pame pali:
estw oti exeis to arxeio:
-rwxr-xr-x root root /bin/aaddjj

An to aaddjj exei mesa tou ena rm -rf / (i kati antistoixo telos pantwn) kai to
ektelesei o djart, to programma tha treksei alla den tha sbisei to disko, giati
trexei me ta dikaiwmata tou djart. An omws to programma einai
rwsr-xr-x root root /bin/aaddjj

kai to ektelesei o djart, tote logw tou 's' (suid bit) to programma tha treksei
me dikaiwmata tou root (owner) kai tha sbisei olo to disko.

Kai, gia na perasoume se auto pou se endiaferei, to device /dev/ttyS2 (p.x.)
logika tha einai 
crw-rw---- root uucp /dev/ttyS2

An (a) to xisp paei na anoiksei to /dev/ttyS2, (b) to ektelesei  o djart kai
(c) den einai suid root, tha apotyxei, giati o xristis djart (an den anikei sto
group uucp) den mporei na diabasei/grapsei se ayto to device. An omws to xisp
einai suid root, tote opoios kai na to ektelesei tha exei dikaiwmata root ara
tha mporei na anoiksei (diabasei/grapsei) to /dev/ttyS2

Synepws, den eksartatai apo esena an tha dialekseis ti mia lysi (suid) i tin
alli (all-executable) alla apo tis apaitiseis tou programmatos. An to proramma
DEN xreiazetai na einai suid, profanws den to kaneis suid.

Re paidia, ksereis kaneis ena man-page, howto, kati telos pantwn pou na ta
eksigei ayta? Eimai aparadektos sto na dinw eksigiseis.

Michalis Kabrianis
--
====================================================================
Gia boithia (h na diagrafhte) e-mail sto majordomo at hellug.gr
Ta archives tis listas einai sto http://lists.hellug.gr/archives
prin steilete kapoia erothsh psakte mipos exei hdh apanththei.
Gia opoiodipote problima stilte e-mail ston owner-linux-greek-users at hellug.gr
====================================================================