Gentoo Archives: gentoo-dev

From: Drake Wyrm <wyrm@×××××.com>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] /sbin /usr/sbin security hole
Date: Tue, 17 Jan 2006 21:33:06
Message-Id: 20060117212927.GA11899@phaenix.haell.com
In Reply to: Re: [gentoo-dev] /sbin /usr/sbin security hole by "Paweł Madej"
1 Pawe?? Madej <linux@××××××××.info> wrote:
2 > Frank Groeneveld wrote:
3 > > You probably have /sbin/shutdown set suid, because on all my Gentoo
4 > > boxes, normal users can't run it, only root can run it. (Permission
5 > > denied). What is the output of ls -al /sbin/?
6 > >
7 > nysander@eleanor ~ $ ls -al /sbin/
8 [snip]
9 > - -rwxr-xr-x 1 root root 10984 lis 29 16:39 halt
10 [snip]
11 > - -rwxr-xr-x 1 root root 19424 lis 29 16:39 shutdown
12 [snip]
13
14 Looks to be in order. If you run halt or shutdown as a non-root user,
15 you should get a terse refusal. shutdown will also give you a standard
16 usage dump.
17
18 <pts://wyrm@phaenix:3/> halt
19 halt: must be superuser.
20 <pts://wyrm@phaenix:3/> shutdown
21 shutdown: you must be root to do that!
22 Usage: shutdown [-akrhPHfFnc] [-t sec] time [warning message]
23 [snip]
24
25 --
26 mount /dev/wyrm /mnt/bed ; sleep 28800
27 --
28 gentoo-dev@g.o mailing list