[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

A setuid bash doesn't give up root.



I've discovered something interesting.

# cp /bin/bash /tmp
# chmod u+s /tmp/bash

$ /tmp/bash
$ whoami
karlheg

# cp /usr/bin/zsh /tmp
# chmod u+s /tmp/zsh

$ /tmp/zsh
# whoami
root

 Perhaps we should have a policy that says all of our shells should
 follow the Bash behaviour?


Reply to: