Re: [cobalt-users] Raq2 Hack

[Hacked Raq2 <jay-mon@xxxxxxxxxx>]

on 8/19/01 1:27 PM, flash22@xxxxxxx at flash22@xxxxxxx wrote:

>> Here are a list of the files he put into /tmp:
>> 
>> echo "[icesk] createing suid shellscript"
>> echo <<EOF > /tmp/suid.sh
>> #!/bin/sh
>> cp /bin/sh /tmp/sh;chmod +s /tmp/sh
> 
> Hmm, this isn't supposed to work on raq2's anymore, one of the updates was
> supposed to remove the stucky bit from /tmp

Here's the permissions of my /tmp directory.

drwxrwxrwt   2 root     root         3072 Aug 19 14:01 tmp

Do you think he was able to spawn a shell? I assume that he was, otherwise,
how would he be able to untar the various programs in /tmp?

thanks