From mboxrd@z Thu Jan 1 00:00:00 1970 From: dave@horsfall.org (Dave Horsfall) Date: Sat, 13 May 2017 10:55:34 +1000 (EST) Subject: [TUHS] The evolution of Unix facilities and architecture In-Reply-To: <1494636703.1615694.975085000.13626EAC@webmail.messagingengine.com> References: <20170513004423.F3A9C18C099@mercury.lcs.mit.edu> <1494636703.1615694.975085000.13626EAC@webmail.messagingengine.com> Message-ID: On Fri, 12 May 2017, Random832 wrote: > Ah. There's the other piece. You start the SUID program under the > debugger, and rather than kicking off the debugger, it simply starts it > non-suid. *However*, in the presence of shared text (either of the two > cases being checked for in the other place), you can make changes to the > text image (e.g. put whatever code you want at the entry point), which > will be reused the *next* time it is started *without* the debugger. Cripes! I think you're right... If so, well done! -- Dave Horsfall DTM (VK2KFU) "Those who don't understand security will suffer."