[MPlayer-users] vidix without being root or suid bit?
Sylvain Petreolle
spetreolle at yahoo.fr
Tue Sep 17 23:33:01 CEST 2002
Holly sh*** ! This works here too on RedHat !
>
> Would you think yourself secure just because you set an
> executable's exec
> flag off, please consider this:
>
> ambapali at tanatos ~$ ls -l /bin/ls
> -rwxr-xr-x 1 root root 43784 Mar 18 2002 /bin/ls
> ambapali at tanatos ~$ su -c "chmod a-x /bin/ls"
> Password:
> ambapali at tanatos ~$ ls -l /bin/ls
> bash: /bin/ls: Permission denied
> ambapali at tanatos ~$ /lib/ld-linux.so.2 /bin/ls
> Backup Varie mimeinstall.results
> Claritas bash-configuratio.tar.bz2 ns_imap
> GNUstep bin nsmail
> GuerraJugoslava.txt configurazione_pine openssh-3.4p1.tar.gz
> Linux-doc desktop plugininstall.results
> Musica floppy poff
> News forth.tar.gz pon
> Note-Rete.tar.bz2 hosts.allow ppp.tgz
> OpenOffice.org1.0 immagini programma.html
> Posta index.html slrnrc-conv.txt
> Preferenze internet src
> Programmi jedrc_vecchio tmp
> Software lug-out www.hardwarebook.net
> Tecnica lynx
> Testi masterizza.sh
>
> On Debian Woody ld-linux.so.2 is a link to ld-2.2.5.so .
> This also works on partitions/devices (like floppies) mounted with
> the
> "noexec" flag.
>
>
>
>
> Sandro
>
>
>
> --
> Bellum se ipsum alet.
> La guerra nutre se stessa.
>
> Livio, "Ab urbe condita", XXXIV,9
>
> _______________________________________________
> RTFM!!! http://www.MPlayerHQ.hu/DOCS
> Search: http://www.MPlayerHQ.hu/cgi-bin/htsearch
> http://mplayerhq.hu/mailman/listinfo/mplayer-users
___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com
More information about the MPlayer-users
mailing list