Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 25 Feb 1996 15:06:37 -0800 (PST)
From:      "az.com" <yankee@anna.az.com>
To:        invalid opcode <coredump@nervosa.com>
Cc:        Brian Tao <taob@io.org>, FREEBSD-SECURITY-L <freebsd-security@freebsd.org>
Subject:   Re: Suspicious symlinks in /tmp
Message-ID:  <Pine.BSF.3.91.960225150400.1969A-100000@anna.az.com>
In-Reply-To: <Pine.BSF.3.91.960225131851.8196F-100000@nervosa.com>

next in thread | previous in thread | raw e-mail | index | archive | help


>From what I understand, the attack involves pointing a symlink to an 
important file in a priveledged area so that the file gets deleted upon 
system startup via the rc's auto /tmp clearing feature.






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.960225150400.1969A-100000>