Alan wrote:
> Admin can take ownership of the file and regain access that
> way, but the owner of the file will now be admin and this
> change of ownership can be noted by the user
Kenn wrote:
> Say I'm administrator on an NT box. I could, in theory,
> manipulate the on-disk data for a file to change the owner
> to whoever I want
It's not even that hard. I remember seeing a tool on
some warez site that simply made the API call for taking
ownership and simply passed a different argument for the
user name and it worked fine! No straight manipulation of data
on the disk. Obviously you had to be root in the first place
Just because Explorer.exe doesn't show a "Give Ownership" as
well as "Take Ownership" button doesn't mean it's not allowed.
This is a kinda "security by obscurity"!. Many sysadmins of NT
boxes won't have a clue it's that easy
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
