Re: volcheck and sol 8

[arboi () BIGFOOT COM (Michel Arboi)]

> > > > > "MP" == Matthew Potter <mpotter () ATPCO COM> writes:

    MP> Anyone notice when they insert their goodies CD(the one with
    MP> the GNU Tools) from Solaris 8 that it auto runs a script
    MP> called volstart.

Which user is running volstart? root?

    MP> So what happens if I make my own CD with a little shell script
    MP> which calls a prebuilt binary with a setuid and setgid 0 ,
    MP> then system("/bin/sh")....  or what ever i want.

I am not sure there is a way to set the setUID bit on a CD (are UFS CD
still supported?), however, you may not need this.

    MP> It's silly since i have physical access anyways....

This way, you can send a CD with a trojan horse.
Funny... This is a classical trick on Windows. "Always disable the
autorun feature" :)

--
mailto:arboi () bigfoot com     http://www.bigfoot.com/~arboi/
GPG Public keys: http://www.bigfoot.com/~arboi/pubkey.txt