uid wrapping was Giving a user root access

Gerhard Mack (gmack@imag.net)
Wed, 12 Aug 1998 13:29:35 -0700 (PDT)

On Wed, 12 Aug 1998, Richard B. Johnson wrote:

> On Wed, 12 Aug 1998, Dirk Hunter wrote:
>
> > Hi,
> >
> > Is it possible to give a user root access to a machine without using
> > su???
> >
> >
>
> Sure...
> # chmod 777 /etc/passwd
> ...or...
> root::0:0:System Administration:/root:/bin/bash
> user::0:0:System Administration:/user:/bin/bash
> ... Then put your machine on the Internet ...
>
> Er no. Sorry I couldn't resist!

toor1::8493:100:toor:/tmp:/bin/bash
8493= root user

Why on earth is that allowed to wrap btw ?
Anyone know why?

Gerhard 

--
Gerhard Mack
irc admin skyline.starchat.net


gmack@imag.net
innerfire@starchat.net


As a computer I find your faith in technology amusing. 




-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html