Jacob Meuser wrote:

> Or you could *possibly* setuid root (chown root; chmod 4755) your X server 
> and bash.  Anyone ever try that?

That's another way to make things fail in surprising ways.

If a program is installed setuid that doesn't expect it, it never
reconciles its real UID (justin) with its effective UID (root), and so
when it invokes another setuid program (say, bash invokes crontab),
the second, setuid-aware program thinks it was invoked by justin, not
by root, and it acts as though it has justin's privileges.

-- 
Bob Miller                              K<bob>
kbobsoft software consulting
http://kbobsoft.com                     [EMAIL PROTECTED]

Reply via email to