Re: shared root account
On Sat, Jul 07, 2001 at 12:11:44AM -0600, Will Aoki wrote:
> On Sat, Jul 07, 2001 at 02:10:09AM +0100, Eric E Moore wrote:
> > I would be very shocked if you could compromise a system with a
> > sudoers entry of:
> > me hostname = (root) /bin/cat
> Depends on what's on the system. I've thought of four similar ways.
Hmm, you forgot the obvious:
sudo cat /etc/shadow > foo
Steven Barker firstname.lastname@example.org
It'll be just like Beggars' Canyon back home.
-- Luke Skywalker
PGP Key Fingerprint: 1A33 9F2E 368D 24B1 81D4 60BF E928 9E28 958F 2058