[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability



Julian Gilbey (J.D.Gilbey@qmw.ac.uk) wrote on 9 January 2001 11:08:
 >Most weird. I get this behaviour when running through a setuid root
 >strace, but I don't get the error messages (and hence the content of
 >/etc/shadow) when I don't use strace. I'm still running potato.

You can't strace a suid root binary if you're not root, so this isn't
a security problem.



Reply to: