[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Linux Virus



On Sat, Mar 31, 2001 at 08:45:25AM -0600, John Hasler wrote:
> Ethan Benson writes:
> > cat <<EOF >> ~/.bashrc
> > alias su='su -c ~/.virus'
> > EOF
> 
> su might benefit from a configuration file that sets the permissable path
> for -c.

interesting idea, somewhat similar to sudo, though i think sudo's PATH
handling may be broken as of late. 

> Another possible fix might be for bash to somehow detect "gain-root"
> commands and refuse to alias them.

this is somewhat weaker, it could also do the following:

cat <<EOF >> ~/.bashrc
export PATH="$HOME/.evil:${PATH}"
EOF

and put a bogus su shell script in ~/.evil

-- 
Ethan Benson
http://www.alaska.net/~erbenson/

Attachment: pgpFF4bubnnGD.pgp
Description: PGP signature


Reply to: