LINUX.IE, website of the Irish Linux Users' Group
Tux rules!

   
Home
New Users
Articles
Download
Projects
Community
Vendors

  Print Version
Email to...
 
Archives:


planetILUG

Recent News

News Archive


Join the
ILUG
on FaceBook


Join the
ILUG
on LinkedIn


Join the
ILUG SETI
Group



















 
 :: Mailing Lists

[ILUG] Porting MyDoom to Linux

[ILUG] Porting MyDoom to Linux

Rick Moen rick at linuxmafia.com
Tue Feb 3 18:39:20 GMT 2004


Quoting myself:

> This is why we sysadmins teach people to say "/bin/su" when su'ing to
> root.  Eh, you never learned that?  Sorry to hear.

On reflection, that's probably been a needless precaution on my part,
albeit well intended.

E.g.:  Malware somehow gets executed in process forked by the MUA.  Sets
alias value for "su" in its local shell context.  Process eventually
terminates.  Oops, were you thinking the alias somehow magically
propagated to all other shells?  Sorry, no, just to subshells.  Ditto
for other mischief committed in the MUA's environment.

Unless you were imagining an MUA that normally runs "su"?

-- 
Cheers,                                Bad Unabomber!
Rick Moen                              Blowing people all to hell.
rick at linuxmafia.com                    Do you take requests?
               --  Unabomber Haiku Contest, CyberLaw mailing list



More information about the ILUG mailing list
Read this without the formatting.
                                                                                                    

 

Hosted by HEAnet


Maintained by the ILUG website team. The aim of Linux.ie is to support and help commercial and private users of Linux in Ireland. You can display ILUG news in your own webpages, read backend information to find out how. Networking services kindly provided by HEAnet, server kindly donated by Dell. Linux is a trademark of Linus Torvalds, used with permission. No penguins were harmed in the production or maintenance of this highly praised website. Looking for the Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
RSS Version
Powered by Dell