From owner-freebsd-hackers Tue Jun 25 05:07:26 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id FAA20184 for hackers-outgoing; Tue, 25 Jun 1996 05:07:26 -0700 (PDT) Received: from genesis.atrad.adelaide.edu.au (genesis.atrad.adelaide.edu.au [129.127.96.120]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id FAA20165; Tue, 25 Jun 1996 05:07:22 -0700 (PDT) Received: from msmith@localhost by genesis.atrad.adelaide.edu.au (8.6.12/8.6.9) id WAA00732; Tue, 25 Jun 1996 22:12:29 +0930 From: Michael Smith Message-Id: <199606251242.WAA00732@genesis.atrad.adelaide.edu.au> Subject: Re: I need help on this one - please help me track this guy down! To: vince@mercury.gaianet.net (-Vince-) Date: Tue, 25 Jun 1996 22:12:28 +0930 (CST) Cc: mark@grumble.grondar.za, hackers@FreeBSD.ORG, security@FreeBSD.ORG, chad@mercury.gaianet.net, jbhunt@mercury.gaianet.net In-Reply-To: from "-Vince-" at Jun 25, 96 01:40:18 am MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-hackers@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk -Vince- stands accused of saying: > > Yeah, you have a point but jbhunt was watching the user as he > hacked root since he brought the file from his own machine.... so that > wasn't something the admin was tricked into doing.. ... so jbhunt should know exactly what he did. If they don't, then you should sack them presto. But I don't think you understand; you cannot _make_ a file owned by root unless you are _already_ root. > Vince -- ]] Mike Smith, Software Engineer msmith@atrad.adelaide.edu.au [[ ]] Genesis Software genesis@atrad.adelaide.edu.au [[ ]] High-speed data acquisition and (GSM mobile) 0411-222-496 [[ ]] realtime instrument control (ph/fax) +61-8-267-3039 [[ ]] Collector of old Unix hardware. "Where are your PEZ?" The Tick [[