[MPlayer-users] vidix without being root or suid bit?

Sylvain Petreolle spetreolle at yahoo.fr
Tue Sep 17 23:33:01 CEST 2002


Holly sh*** ! This works here too on RedHat !
> 
>   Would you think yourself secure just because you set an
> executable's exec
> flag off, please consider this:
> 
> ambapali at tanatos ~$ ls -l /bin/ls
> -rwxr-xr-x    1 root     root        43784 Mar 18  2002 /bin/ls
> ambapali at tanatos ~$ su -c "chmod a-x /bin/ls"
> Password: 
> ambapali at tanatos ~$ ls -l /bin/ls
> bash: /bin/ls: Permission denied
> ambapali at tanatos ~$ /lib/ld-linux.so.2 /bin/ls
> Backup               Varie                      mimeinstall.results
> Claritas             bash-configuratio.tar.bz2  ns_imap
> GNUstep              bin                        nsmail
> GuerraJugoslava.txt  configurazione_pine        openssh-3.4p1.tar.gz
> Linux-doc            desktop                    plugininstall.results
> Musica               floppy                     poff
> News                 forth.tar.gz               pon
> Note-Rete.tar.bz2    hosts.allow                ppp.tgz
> OpenOffice.org1.0    immagini                   programma.html
> Posta                index.html                 slrnrc-conv.txt
> Preferenze           internet                   src
> Programmi            jedrc_vecchio              tmp
> Software             lug-out                    www.hardwarebook.net
> Tecnica              lynx
> Testi                masterizza.sh
> 
>   On Debian Woody ld-linux.so.2 is a link to ld-2.2.5.so .
>   This also works on partitions/devices (like floppies) mounted with
> the
> "noexec" flag.
> 
> 
> 
> 
>   Sandro
> 
> 
> 
> -- 
> Bellum se ipsum alet.
>        La guerra nutre se stessa.
> 
> Livio, "Ab urbe condita", XXXIV,9
> 
> _______________________________________________
> RTFM!!!  http://www.MPlayerHQ.hu/DOCS
> Search:  http://www.MPlayerHQ.hu/cgi-bin/htsearch
> http://mplayerhq.hu/mailman/listinfo/mplayer-users 

___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com




More information about the MPlayer-users mailing list