Dnia 29-07-2006, sob o godzinie 19:26 +0200, dragoran napisał(a): > > If you can issue such commands to the drive, you can easily: > > - become root > how could this lets a user become root? Maybe he was thinking about sending commands to any drive? Speaking to hard disk drive one can edit /etc/passwd and so on. But we're talking about CD drives, how can a CD drive make me root? People have suid cdrecords on machines with shell accounts and to this point there was no exploit using SCSI commands to gain privileges (the only one I know of was using user-provided $RSH as root). Lam
Attachment:
signature.asc
Description: To jest =?UTF-8?Q?cz=C4=99=C5=9B=C4=87?= listu podpisana cyfrowo
-- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
