From owner-cvs-all Wed Dec 2 15:56:21 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA23111 for cvs-all-outgoing; Wed, 2 Dec 1998 15:56:21 -0800 (PST) (envelope-from owner-cvs-all@FreeBSD.ORG) Received: from nagual.pp.ru (lsd.relcom.eu.net [193.125.27.73]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA23103; Wed, 2 Dec 1998 15:56:15 -0800 (PST) (envelope-from ache@nagual.pp.ru) Received: (from ache@localhost) by nagual.pp.ru (8.9.1/8.9.1) id CAA95570; Thu, 3 Dec 1998 02:55:54 +0300 (MSK) (envelope-from ache) Message-ID: <19981203025553.A93963@nagual.pp.ru> Date: Thu, 3 Dec 1998 02:55:53 +0300 From: "Andrey A. Chernov" To: dima@best.net, guido@gvr.org, cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG Subject: Re: cvs commit: src/etc master.passwd Mail-Followup-To: dima@best.net, guido@gvr.org, cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG References: <19981203014511.A72032@nagual.pp.ru> <199812022329.PAA86705@burka.rdy.com> <19981203023719.A87604@nagual.pp.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.93.2i In-Reply-To: <19981203023719.A87604@nagual.pp.ru>; from ache@nagual.pp.ru on Thu, Dec 03, 1998 at 02:37:19AM +0300 Organization: Biomechanoid Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk On Thu, Dec 03, 1998 at 02:37:19AM +0300, Andrey A. Chernov wrote: > Yes, but _after_ having root access once (suppose you close the hole > quickly) he can use your machine forever under operator account (without > root access) which is hardly detected because passwd unchanged. Just to add: system binaries unchanged too, no s-bit changes too, just directory with .cshrc which can leave forever undetected. -- Andrey A. Chernov http://www.nagual.pp.ru/~ache/ MTH/SH/HE S-- W-- N+ PEC>+ D A a++ C G>+ QH+(++) 666+>++ Y To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message