From owner-freebsd-hackers Mon Oct 23 18:28:11 1995 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.6.12/8.6.6) id SAA17588 for hackers-outgoing; Mon, 23 Oct 1995 18:28:11 -0700 Received: from aslan.cdrom.com (aslan.cdrom.com [192.216.223.142]) by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id SAA17582 for ; Mon, 23 Oct 1995 18:28:08 -0700 Received: from localhost.cdrom.com (localhost.cdrom.com [127.0.0.1]) by aslan.cdrom.com (8.6.12/8.6.9) with SMTP id SAA21729; Mon, 23 Oct 1995 18:27:38 -0700 Message-Id: <199510240127.SAA21729@aslan.cdrom.com> X-Authentication-Warning: aslan.cdrom.com: Host localhost.cdrom.com didn't use HELO protocol To: =?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?= (aka Andrey A. Chernov, Black Mage) cc: ache@freefall.freebsd.org, John Polstra , freebsd-hackers@freebsd.org, gibbs@freefall.freebsd.org Subject: Re: ld.so, LD_NOSTD_PATH, and suid/sgid programs In-reply-to: Your message of "Tue, 24 Oct 1995 04:22:00 +0300." Date: Mon, 23 Oct 1995 18:27:38 -0700 From: "Justin T. Gibbs" Sender: owner-hackers@freebsd.org Precedence: bulk >In message John Polstra writes: > >>> >Bogus argument in my opinion. The people who are going to use >>> >LD_NOSTD_PATH will know its effects. If you still want to argue >>> >about this, fine, but I'd like to put this issue to a vote. >>> >>> Yes, it can be used by intruder for hackers purposes, if he examine >>> previously what script does. > >>I don't think it can be used for hacking purposes. All it can possibly >>do is make a command fail to execute at all. Any shell script would >>have to be pretty silly to permit that to result in a security breach. > >Well, simple example: > > setuid_shared_binary > /tmp/file Fails since it cannot find its libraries so /tmp/file is empty > ... (f.e. few static commands) > setuid_static_binary < /tmp/file # OOPS! What? It can't handle empty input? > (umask is restrictive, of course) >-- >Andrey A. Chernov : And I rest so composedly, /Now, in my bed, >ache@astral.msk.su : That any beholder /Might fancy me dead - >http://dt.demos.su/~ache : Might start at beholding me, /Thinking me dead. >RELCOM Team,FreeBSD Team : E.A.Poe From "For Annie" 1849 -- Justin T. Gibbs =========================================== Software Developer - Walnut Creek CDROM FreeBSD: Turning PCs into workstations ===========================================