When I write email while doing ten other things they don't always make
sense.

having root NFS privs would also allow you (if you had all your home dirs
NFS mounted) to browse everyones files.

The main problem that the control of root access is out of the servers
hands.  Is is now trusting the connecting clients.

-e

On Fri, 19 Apr 2002, Eric J. Pinnell wrote:

> I don't know if this was answered but the thinking is that you could
> having root on the client machine would give you root on the server
> machine.
> 
> So having root on your local linux box that mounts another server would
> create a trust relationship that would let you, for example, create an
> suid root a shell and put it on the server.
> 
> -e
> 
> 
> On Thu, 18 Apr 2002, John Hunter wrote:
> 
> > >>>>> "jay" == jay  <[EMAIL PROTECTED]> writes:
> > 
> >     jay> i think it's called the "root me" flag.  =jay
> > 
> > Can you explain to me what the danger is?  How does read/write access
> > to /var/spool/mail/root by LAN clients with root permission make it
> > easier to get root access to other NFS clients or the NFS server?
> > 
> > Thanks,
> > John Hunter
> > 
> > _______________________________________________
> > Bits mailing list
> > [EMAIL PROTECTED]
> > http://www.sugoi.org/mailman/listinfo/bits
> > 
> 
> _____________________________________________________________________________
> <majcher> icky is like a shadowy hit man, that nobody ever sees, and can only
>           contact through some strange process.
> 
> 
> _______________________________________________
> Bits mailing list
> [EMAIL PROTECTED]
> http://www.sugoi.org/mailman/listinfo/bits
> 

_____________________________________________________________________________
<majcher> icky is like a shadowy hit man, that nobody ever sees, and can only
          contact through some strange process.


_______________________________________________
Bits mailing list
[EMAIL PROTECTED]
http://www.sugoi.org/mailman/listinfo/bits

Reply via email to