On Wednesday 19 August 2009 09:17:30 Albert Hopkins wrote:
> On Wed, 2009-08-19 at 01:20 +0200, Alan McKinnon wrote:
> > > In a pinch, you can also use the argument init=/bin/bash to get a
> > > bash shell up without using init.  It's saved me a CD or a heap of
> > > trouble a few times.
> >
> > Wait until some bastard runs
> >
> > mv /bin/bash /bin/bash.gotcha
> >
> > then you try init=/bin/bash :-)
> >
> > It causes utter carnage, without another shell handy, you do need a CD
> > to get
> > around that one.
>
> Hmm.. let's see, who could successfully run that command?
>
> $ ls -ld /bin /bin/bash
> 4.0K drwxr-xr-x 2 root root 4.0K 2009-08-17 12:56 /bin/
> 864K -rwxr-xr-x 1 root root 861K 2009-08-15 20:46 /bin/bash*
>
> Oh, the same "bastard" who can 'passwd root' or 'rm -rf /' or pretty
> much  anything else.
>
> So if you have a person who has the capability and will to do that then
> I think you have far more to worry about.
>
> So the moral to the story is don't give root access to "bastards".

Does that include bastard operators? Or only when they come from hell? :P

Shawn

Reply via email to