Strange command histories in hacked shell history
mnsan11 at earthlink.net
Fri Dec 17 18:11:33 PST 2004
Bill Vermillion wrote:
>Can anyone explain why su does not use the UID from the login
>instead of the EUID ? It strikes me as a security hole, but I'm no
>security expert so explanations either way would be welcomed.
Because su does exactly what is says. From the manual -
*su* requests the password for /login/ and switches to that user and group ID
after obtaining proper authentication.
Just for fun, here's an little snippet from the sudo manual -
*sudo* allows a permitted user to execute a /command/ as the superuser
or another user, as specified in the /sudoers/ file. The real and
effective uid and gid are set to match those of the target user as
specified in the passwd file and the group vector is initialized based
on blah blah blah...
More information about the freebsd-security