#21: /sbin/service is reliably executed by suid root and doesn't clean it's PATH
3 views
Skip to first unread message
William A. Carrel
unread,
Jan 21, 2007, 4:39:10 PM1/21/07
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to moab...@googlegroups.com
#21: /sbin/service is reliably executed by suid root and doesn't clean it's PATH
Their fix for /sbin/service seems pretty sane. -- wac
William A. Carrel
unread,
Jan 21, 2007, 4:43:13 PM1/21/07
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to moab...@googlegroups.com
I suppose realistically writeconfig should be patched to sanitize it's PATH, but since it is suid root it's not ape-able and we'd have to rely on other methods... -- wac