Re: Secure setuid mount program: A model!

Article View: comp.security.misc

Article #428

Back to comp.security.misc Previous Next

#428

From: Marc Auslander
Date: Thu, 20 Aug 1992 18:53

12 lines
1190 bytes

Your approach increases the vulnerability of the system to Trojan horse
attacks.  In theory, a user running as root should be extra careful
about what programs he runs, what's in his path, etc.

But now any program run by your authorized users in their normal use
of the system can execute the mount command.

--


Marc Auslander       (IBM)<marc@marc.watson.ibm.com>      914 784-6699
                     (Internet)<marc@watson.ibm.com>

Technical Details

Message-ID: <MARC.92Aug20135359@marc.watson.ibm.com>

Path: arc1-ca.pugleaf.net!sparky!uunet!newsgate.watson.ibm.com!yktnews!admin!flu!marc

References: <BUZZ.92Aug19092622@toxicavenger.bear.com> <BUZZ.92Aug19163601@toxicavenger.bear.com>

Show Full Headers

Complete Article Headers

Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!newsgate.watson.ibm.com!yktnews!admin!flu!marc
From: marc@watson.ibm.com (Marc Auslander)
Subject: Re: Secure setuid mount program: A model!
Sender: news@watson.ibm.com (NNTP News Poster)
Message-ID: <MARC.92Aug20135359@marc.watson.ibm.com>
In-Reply-To: buzz@toxicavenger.bear.com's message of 19 Aug 92 20:36:01 GMT
Date: Thu, 20 Aug 1992 18:53:59 GMT
Distribution: comp
Disclaimer: This posting represents the poster's views, not necessarily those of IBM
References: <BUZZ.92Aug19092622@toxicavenger.bear.com>
 <BUZZ.92Aug19163601@toxicavenger.bear.com>
Nntp-Posting-Host: marc.watson.ibm.com
Organization: IBM T.J. Watson Research Center, Hawthorne, New York
Lines: 12

Reply to Parent Message