User: Password:
|
|
Subscribe / Log in / New account

2 weeks isn't completely unreasonable.

2 weeks isn't completely unreasonable.

Posted Nov 6, 2008 14:16 UTC (Thu) by jimparis (subscriber, #38647)
In reply to: 2 weeks isn't completely unreasonable. by alex
Parent article: Android's first vulnerability

A development tool would be a setuid telnetd binary, not a magic telnetd binary that grants euid=0 without being setuid.

Someone from Google has mentioned to me via IRC that it's definitely not intentional. I still haven't managed to track down the cause though.


(Log in to post comments)

2 weeks isn't completely unreasonable.

Posted Nov 6, 2008 16:21 UTC (Thu) by jimparis (subscriber, #38647) [Link]

Nevermind, I found it -- init spawns a root shell on /dev/console that picks up all keyboard input. Hilarious!
http://android.jim.sh/index.php/ConsoleShell


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds