2016-03-29



There is a system on which I have only user access. I control the
webserver content. The webserver runs as user nobody, so I cannot
directly work on files it creates. But as I am able  to  let  the
webserver  execute  commands,  I  can indirectly become nobody as
well. This is complicated. To ease working,  I  thought  I  could
just  create a suid nobody shell. ;-) Well, this instantly smells
like cracking, but in my case it is just easing I already do  and
am supposed to do.

First I tried with bash(1), but that prevented to be used as suid
shell, somehow. But ksh(1) worked just fine. :-)

Of course, better approaches to solve the problem  are  available
(e.g.  sudo(8)).  In my case just doing was preferred over asking
root to configure sudo and then waiting until they managed to  do
that.



http://marmaro.de/lue/        markus schnalke <meillo@marmaro.de>