Full Disclosure mailing list archives
Re: Partial Solution to SUID Problems
From: Henning Brauer <hb-fulldisclosure () bsws de>
Date: Mon, 8 Dec 2003 12:48:03 +0100
On Sun, Dec 07, 2003 at 03:48:03PM +0100, Markus Friedl wrote:
On a server that you have shell access, you probably really need to add 'passwd' to the 'suid partitiion'. You may need some other things, on some of our servers, I have 'ping' as well.it's not really necessary to have passwd setuid.
actually, I wasn't so much after passwd, this was just an example. the same rule applies for all more or less shared ressources where the individual users needs write access to under special constraints, but not generally - like with passwd, normal users should not have write access in general, but need for changing their passwords, thus a setuid passwd. This case can be worked around, others probably too, some probably not. the point was that a setuid or setgid binary in this case increases security over having write access for everyone. same rules apply for ressources where the ordinary user must not have read access except for the special cases. -- Henning Brauer, BS Web Services, http://bsws.de hb () bsws de - henning () openbsd org Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Partial Solution to SUID Problems, (continued)
- Re: Partial Solution to SUID Problems Henning Brauer (Dec 06)
- Re: Partial Solution to SUID Problems Todd Burroughs (Dec 06)
- Re: Partial Solution to SUID Problems Michal Zalewski (Dec 06)
- Re: Partial Solution to SUID Problems Valdis . Kletnieks (Dec 06)
- Re: Partial Solution to SUID Problems Todd Burroughs (Dec 07)
- Re: Partial Solution to SUID Problems Karl DeBisschop (Dec 07)
- Re: Partial Solution to SUID Problems Michal Zalewski (Dec 07)
- Re: Partial Solution to SUID Problems Valdis . Kletnieks (Dec 06)
- Re: Partial Solution to SUID Problems Markus Friedl (Dec 07)
- Re: Partial Solution to SUID Problems Brian Hatch (Dec 07)
- Re: Partial Solution to SUID Problems Henning Brauer (Dec 08)
- Re: Partial Solution to SUID Problems Todd Burroughs (Dec 06)
- Re: Partial Solution to SUID Problems Michal Zalewski (Dec 06)