| |||||||||||||
suid-binary vulnerabilitiessuid-binary vulnerabilitiesPosted Nov 1, 2010 23:52 UTC (Mon) by anselm (subscriber, #2796)In reply to: suid-binary vulnerabilities by nix Parent article: Two glibc vulnerabilities
/sbin/sln surely does. No relocation, no PT_INTERP: static as static comes, and on pretty much every system I'm on Debian sid, and I don't have an executable called »sln« – not in /sbin, not anywhere. Am I missing something?
(Log in to post comments)
suid-binary vulnerabilities Posted Nov 2, 2010 0:14 UTC (Tue) by nix (subscriber, #2304) [Link]
It's part of glibc, and is bloody useful e.g. to put your dynamic linker symlink back in place if something blows it away. Since this is its primary purpose, perhaps some distros don't ship it... but if you don't have that I hope you have sash or busybox or something else statically linked to recover your system in case of disaster. (OK, a boot CD/USB key could do the same job but is somewhat inelegant.)
|
|||||||||||||