4 Aug
2019
4 Aug
'19
9:43 a.m.
On Sun, 4 Aug 2019 at 08:37, Dave Horsfall <dave(a)horsfall.org> wrote:
Is it just me, or did someone actually implement
set-uid scripts?
Yes, they were a thing for a while, until someone realised that you could
do:
ln -s /bin/scriptname ./-i
"-i" # assuming that "." is already in your path
...and get a root shell. Source: I did this on (ISTR) 4.1 or 4.2BSD.
-a
--
http://dropsafe.crypticide.com/aboutalecm