Reindl Harald wrote:
well, and what would have been the problem copy the binary to
somwehere
else as non-root and run the command there also as non-root - and hey,
it would have even started from there again as non-root
Well, to be fair, if, instead of disabling the getuid check (as it does, as
I explained), the line I posted would have put something evil INSIDE the
getuid check, running the binary as non-root would not have done anything
bad, only running it as root would.
Kevin Kofler