Re: Unix NOT secure against Viruses on home PCs

From: jayjwa (jayjwa_at_nowhere.org)
Date: 11/27/04 

Date: Sat, 27 Nov 2004 17:48:04 -0000

On 2004-11-24, Neil Cherry <njc@wolfgang.uucp> wrote:

> try:

> alias \/bin\/su='echo Im removing everything'

I fail to see how this is a security concern; if you can *set* the alias to
begin with, why not just deep-six the whole thing right off? That is, you
still can only kill your files, and not the whole system. Unless you's are
arguing that some other user sets this and then root runs it, but that is the
age-old rule about root not being allowed to run user-controllable files and
users not being able to access system files for write access to begin with... 

-- 
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++

Relevant Pages

  • Re: Unix NOT secure against Viruses on home PCs
    ... > still can only kill your files, ... > arguing that some other user sets this and then root runs it, ... > users not being able to access system files for write access to begin with... ... but to run a fake su that will capture your root password. ...
    (comp.os.linux.security)
  • ulimit -u for all users
    ... I'd like to limit the maximum number of processes for all users, as root, so that a certain maximum number cannot be exceeded (when the user sets ulimit -u to somthing higher). ...
    (comp.os.linux.misc)
Quantcast