From owner-freebsd-hackers Mon Jun 24 19:23:39 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id TAA11773 for hackers-outgoing; Mon, 24 Jun 1996 19:23:39 -0700 (PDT) Received: from Fieber-John.campusview.indiana.edu (Fieber-John.campusview.indiana.edu [149.159.1.34]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id TAA11744; Mon, 24 Jun 1996 19:23:30 -0700 (PDT) Received: from localhost (jfieber@localhost) by Fieber-John.campusview.indiana.edu (8.7.5/8.7.3) with SMTP id VAA09686; Mon, 24 Jun 1996 21:22:55 -0500 (EST) X-Authentication-Warning: Fieber-John.campusview.indiana.edu: jfieber owned process doing -bs Date: Mon, 24 Jun 1996 21:22:55 -0500 (EST) From: John Fieber X-Sender: jfieber@Fieber-John.campusview.indiana.edu To: -Vince- cc: "Jordan K. Hubbard" , Mark Murray , Wilko Bulte , guido@gvr.win.tue.nl, hackers@FreeBSD.org, security@FreeBSD.org, ache@FreeBSD.org, Chad Shackley , jbhunt Subject: Re: I need help on this one - please help me track this guy down! In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-hackers@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk On Mon, 24 Jun 1996, -Vince- wrote: > Good one Jordan :-) But the thing is how did he get that binary there > in the first place since if he can do that here, then he can do that on any > machine that he doesn't have group wheel on to gain root access... I'll Um, have people forgotten about the nifty little mount trick that used to be a FreeBSD feature? You would only need to use it once to install your root command. -john == jfieber@indiana.edu =========================================== == http://fallout.campusview.indiana.edu/~jfieber ================