From owner-freebsd-security Sun Aug 3 07:35:20 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id HAA26551 for security-outgoing; Sun, 3 Aug 1997 07:35:20 -0700 (PDT) Received: from shell.monmouth.com (root@shell.monmouth.com [205.164.220.9]) by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id HAA26544 for ; Sun, 3 Aug 1997 07:35:18 -0700 (PDT) Received: from i4got.lakewood.com (fh-ppp23.monmouth.com [205.164.221.55]) by shell.monmouth.com (8.8.5/8.7.3) with ESMTP id KAA25973; Sun, 3 Aug 1997 10:32:47 -0400 (EDT) Received: (from pechter@localhost) by i4got.lakewood.com id KAA02364 (8.8.5/IDA-1.6); Sun, 3 Aug 1997 10:35:02 -0400 (EDT) From: Bill Pechter Message-ID: <199708031435.KAA02364@i4got.lakewood.com> Subject: Re: setuid shutdown? In-Reply-To: from "Jonathan A. Zdziarski" at "Aug 3, 97 10:05:45 am" To: jonz@netrail.net (Jonathan A. Zdziarski) Date: Sun, 3 Aug 1997 10:35:02 -0400 (EDT) Cc: freebsd-security@freebsd.org Reply-to: pechter@lakewood.com X-Phone-Number: 908-389-3592 X-Mailer: ELM [version 2.4ME+ PL31 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk > I just realized that my version of freebsd 2.2.2 installs with a > set-uid-root shutdown command allowing anybody who wants to to shutdown or > reboot the server. Obviously I removed the bits, and got rid of the > problem, but you might all want to check that. I currently have sudo > installed, and am able to unsuid quite a few other programs and run them > under sudo (which logs nicely what my employees are doing too). > -r-sr-x--- 1 root operator 151552 Jun 10 13:59 /sbin/shutdown According to the permissions only root and members of the operator group can do shutdown with this version of shutdown (2.2.2-RELEASE) Bill ------------------------------------------------------------------------------ Bill Pechter | 17 Meredith Drive Tinton Falls, NJ 07724 | 908-389-3592 pechter@lakewood.com | Save computing history, give an old geek old hardware. This msg brought to you by the letters PDP and the number 11.