chapter 6, installing kernel headers

Gerard Beekmans gerard at linuxfromscratch.org
Fri Jan 17 08:49:09 PST 2003


On January 17, 2003 04:29 am, Richard Lightman wrote:
> Better still, do not ever extract tar archives as root:
>
> [root at urusai root]# echo -e '#! /bin/bash\necho Not trojanned' >/bin/trojan
> [root at urusai root]# chmod 755 /bin/trojan
> [root at urusai root]# trojan
> Not trojanned
> [root at urusai root]# tar -t </var/tmp/crack.tar
> crack/
> crack/bin
> crack/bin/trojan
> [root at urusai root]# tar -x </var/tmp/crack.tar
> [root at urusai root]# trojan
> #! /bin/cat
>
> This is the trojanned version
> [root at urusai root]#

So ./crack/bin is in your $PATH then?



-- 
Gerard Beekmans
www.linuxfromscratch.org

-*- If Linux doesn't have the solution, you have the wrong problem -*-
-- 
Unsubscribe: send email to listar at linuxfromscratch.org
and put 'unsubscribe lfs-dev' in the subject header of the message



More information about the lfs-dev mailing list