solaris tape dev permission stupidity

From: joshua grubman (jgat_private)
Date: Wed Oct 21 1998 - 15:14:53 PDT

  • Next message: Nergal: "Root compromise via zgv"

    hi,
    
    this is rather silly and obvious, but i couldn't find anything in seaching
    the old archives on geek-girl.com.
    
    problem:
    
    under solaris, scsi tape devices (/dev/rmt/*, which are linked to the st@x,x:
    devs in /devices) are created with the permissions bits set to 666. this allows
    a mallicious user with a login on your system to 'mt erase' the contents of any
    tape devices connected to your system.
    
    solution:
    
    this is a tough one. i'll let you figure it out yourself.
    
    ~josh
    
    ---
    josh grubman / http://false.net/~jg
    "if you don't ask, i won't upset you"
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:20:24 PDT