*BSD News Article 17030


Return to BSD News archive

Path: sserve!newshost.anu.edu.au!munnari.oz.au!news.Hawaii.Edu!ames!agate!agate.berkeley.edu!cgd
From: cgd@eden.CS.Berkeley.EDU (Chris G. Demetriou)
Newsgroups: comp.os.386bsd.bugs
Subject: Re: SUID BUG! -- There back!
Date: 11 Jun 93 10:36:30
Organization: Kernel Hackers 'r' Us
Lines: 28
Message-ID: <CGD.93Jun11103630@eden.CS.Berkeley.EDU>
References: <crt.739809100@tiamat.umd.umich.edu>
NNTP-Posting-Host: eden.cs.berkeley.edu
In-reply-to: crt@tiamat.umd.umich.edu's message of 11 Jun 1993 10:35:18 -0400

In article <crt.739809100@tiamat.umd.umich.edu> crt@tiamat.umd.umich.edu (Rob Shady) writes:
.Okay, here is the deal.. I tried creating an account for my dialin UNIX system
.that did a "chroot" to the users home directory, just to be safe for now until
.I get everything set up.  Kept getting a message saying "Operation not 
.permitted".  I created the file like this...
.
.  --
.Filename: ~guest/bin/go.home
./usr/sbin/chroot /home/guest/guest
.
.chown root.wheel ~guest/bin/go.home
.chmod 4755 ~guest/bin/go.home

you get "Operation not permitted" from *what*?

what are the contents of "go.home"?  is it a binary?
(i hope so; setuid shell scripts are currently disallowed
for security reasons, in both 386bsd and NetBSD.)

i'd like to look at the source...


chris
--
Chris G. Demetriou                                    cgd@cs.berkeley.edu

   "386bsd as depth first search: whenever you go to fix something you
       find that 3 more things are actually broken." -- Adam Glass