From owner-freebsd-security Sun Aug 3 08:39:42 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id IAA28961 for security-outgoing; Sun, 3 Aug 1997 08:39:42 -0700 (PDT) Received: from netrail.net (netrail.net [205.215.10.3]) by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id IAA28955 for ; Sun, 3 Aug 1997 08:39:39 -0700 (PDT) Received: from localhost (jonz@localhost) by netrail.net (8.8.6/8.8.6) with SMTP id LAA09248; Sun, 3 Aug 1997 11:38:55 GMT Date: Sun, 3 Aug 1997 11:38:55 +0000 (GMT) From: "Jonathan A. Zdziarski" To: Bill Pechter cc: freebsd-security@freebsd.org Subject: Re: setuid shutdown? In-Reply-To: <199708031435.KAA02364@i4got.lakewood.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk Hmm mine was globably executable ------------------------------------------------------------------------- Jonathan A. Zdziarski NetRail Incorporated Server Engineering Manager 230 Peachtree St. Suite 500 jonz@netrail.net Atlanta, GA 30303 http://www.netrail.net (888) - NETRAIL ------------------------------------------------------------------------- On Sun, 3 Aug 1997, Bill Pechter wrote: :> I just realized that my version of freebsd 2.2.2 installs with a :> set-uid-root shutdown command allowing anybody who wants to to shutdown or :> reboot the server. Obviously I removed the bits, and got rid of the :> problem, but you might all want to check that. I currently have sudo :> installed, and am able to unsuid quite a few other programs and run them :> under sudo (which logs nicely what my employees are doing too). :> : :-r-sr-x--- 1 root operator 151552 Jun 10 13:59 /sbin/shutdown : :According to the permissions only root and members of the operator :group can do shutdown with this version of shutdown (2.2.2-RELEASE) : :Bill :------------------------------------------------------------------------------ : Bill Pechter | 17 Meredith Drive Tinton Falls, NJ 07724 | 908-389-3592 : pechter@lakewood.com | Save computing history, give an old geek old hardware. : This msg brought to you by the letters PDP and the number 11. :