Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability

[Carlos Carvalho]

Julian Gilbey ([EMAIL PROTECTED]) wrote on 9 January 2001 11:08:
 >Most weird. I get this behaviour when running through a setuid root
 >strace, but I don't get the error messages (and hence the content of
 >/etc/shadow) when I don't use strace. I'm still running potato.

You can't strace a suid root binary if you're not root, so this isn't
a security problem.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]