--EdRE1UL8d3mMOE6m
Content-Type: text/plain; charset=cp1252; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Friday, March 24 at 07:05 PM, quoth Dave Korn:
>> Here is a simple hack to break sudo and su to get free root. Add=20
>> this to ~/.bashrc and fill in the following blanks:
>>
>> * ~/.root_kit/rk_su
>> Your hacked su to give root on su --now-dammit
>> * ~/.root_kit/silent_install_root_kit
>> Your script to silently install rk_su over /bin/su and add SUID to
>> it.
>
> So, in other words, all you need in order to get root access is a=20
> rootkit, your shell script, and root access? Ummm... I don't get=20
> it.

More precisely, if I have access to your bashrc and you have access to=20
sudo, I can give myself permanent root access (I don=92t need to know=20
your password).

~Kyle
--=20
Well, I've wrestled with reality for over thirty five years, doctor, and=20
I'm happy to state I finally won out over it.
-- Jimmy Stewart, in "Harvey"

--EdRE1UL8d3mMOE6m
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Comment: Thank you for using encryption!

iD8DBQFEJgmcBkIOoMqOI14RAj33AKDjUkA6ha4ELvTYLjzfwN nFuu95XgCgxkyg
in2K1/VSUNX5aIUUQ4HcCtc=
=inIZ
-----END PGP SIGNATURE-----

--EdRE1UL8d3mMOE6m--