パーミッションが落とされたファイル(2)

debian 玄箱/Pro

write パーミッションが落とされるのみならず、 setuid や setgid 等も落ちていることを忘れていた。
yasunari@hackkit:/mnt$ tar ztvf hddrootfs.tar.gz | grep '^...s'
-rwsr-xr-x root/root     35464 2006-08-14 07:58:00 ./bin/login
-rwsr-xr-x root/root     22840 2006-08-14 07:58:00 ./bin/su
-rwsr-xr-x root/root     64536 2005-09-19 01:58:21 ./bin/mount
-rwsr-xr-x root/root     39012 2005-09-19 01:58:21 ./bin/umount
-rwsr-xr-x root/root     32544 2004-01-02 23:03:14 ./bin/ping
-rwsr-xr-x root/root     28788 2004-01-02 23:03:14 ./bin/ping6
-r-sr-xr-x root/root     15904 2004-07-03 04:09:19 ./sbin/unix_chkpwd
-rwsr-xr-x root/root     19932 2006-09-26 20:47:47 ./usr/bin/newgrp
-rwsr-xr-x root/root     28008 2006-08-14 07:57:58 ./usr/bin/chfn
-rwsr-xr-x root/root     24028 2006-08-14 07:57:58 ./usr/bin/chsh
-rwsr-xr-x root/root     32496 2006-08-14 07:57:58 ./usr/bin/gpasswd
-rwsr-xr-x root/root     24816 2006-08-14 07:57:58 ./usr/bin/passwd
-rwsr-xr-x root/root     35732 2006-09-26 20:49:12 ./usr/bin/at
-rwsr-xr-x root/root      5676 2006-12-04 20:39:21 ./usr/lib/pt_chown
-rwsr-xr-- root/root      5808 2005-04-01 02:41:10 ./usr/lib/telnetlogin
-rwsr-xr-x root/root    632000 2006-09-26 20:49:37 ./usr/sbin/exim4
yasunari@hackkit:/mnt$ tar ztvf hddrootfs.tar.gz | grep '^......s'
drwxrwsr-x root/staff        0 2004-12-16 08:22:50 ./home/
-rwxr-sr-x root/tty       9796 2005-09-19 01:58:37 ./usr/bin/wall
-rwxr-sr-x root/root     36728 2006-08-14 07:57:57 ./usr/bin/chage
-rwxr-sr-x root/root     15848 2006-08-14 07:57:58 ./usr/bin/expiry
-rwxr-sr-x root/tty       7584 2004-11-02 04:42:12 ./usr/bin/bsd-write
-rwxr-sr-x root/root     24300 2004-07-29 06:49:11 ./usr/bin/crontab
-rwxr-sr-x root/root      8964 2004-06-05 01:27:36 ./usr/bin/dotlockfile
drwxrwsr-x root/root         0 2004-12-16 08:22:50 ./usr/src/
drwxrwsr-x root/staff        0 2007-01-08 13:41:26 ./usr/local/
drwxrwsr-x root/staff        0 2007-01-08 13:41:26 ./usr/local/share/
drwxrwsr-x root/staff        0 2006-09-26 20:46:04 ./usr/local/share/man/
drwxrwsr-x root/staff        0 2006-09-26 20:46:03 ./usr/local/bin/
drwxrwsr-x root/staff        0 2006-09-26 20:46:03 ./usr/local/games/
drwxrwsr-x root/staff        0 2006-09-26 20:46:03 ./usr/local/lib/
drwxrwsr-x root/staff        0 2006-09-26 20:46:03 ./usr/local/include/
drwxrwsr-x root/staff        0 2007-03-11 12:24:44 ./usr/local/sbin/
drwxrwsr-x root/staff        0 2006-09-26 20:46:03 ./usr/local/src/
drwxr-sr-x root/root         0 2007-01-08 13:41:27 ./var/cache/man/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/fsstnd/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/cat1/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/cat2/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/cat3/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/cat4/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/cat5/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/cat6/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/cat7/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/cat8/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/cat9/
drwxr-sr-x root/root         0 2006-09-26 20:51:35 ./var/cache/man/oldlocal/
drwxr-sr-x root/root         0 2006-09-26 20:51:35 ./var/cache/man/local/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/X11R6/
drwxr-sr-x root/root         0 2006-09-26 20:51:10 ./var/cache/man/opt/
drwxrwsr-x root/staff        0 2004-12-16 08:22:50 ./var/local/
drwxr-s--- root/root         0 2006-09-26 20:51:56 ./var/log/exim4/
drwxr-sr-x root/root         0 2006-09-26 20:52:17 ./var/log/news/
drwxrwsr-x root/root         0 2006-09-26 20:46:03 ./var/mail/
yasunari@hackkit:/mnt$ tar ztvf hddrootfs.tar.gz | grep '^.........t'
drwxrwxrwt root/root         0 2007-03-08 21:11:32 ./tmp/
drwxrwxrwt root/root         0 2004-12-16 08:22:50 ./var/lock/
drwxrwxrwt root/root         0 2007-01-08 13:41:35 ./var/tmp/
drwxrwxrwt root/root         0 2006-09-26 20:50:50 ./var/tmp/vi.recover/
yasunari@hackkit:/mnt$
ありすぎ。


KURO-BOX/PRO
玄人志向
楽天市場
TSUKUMO ネットショップ
Yahoo!ショッピング
Sofmap
クレバリー
TwoTop New!


PodCast の Muvo^2 への自動ダウンロード
ハックの記録
LinkStation/玄箱 をハックしよう

シャットダウン時ブザーを鳴す

Copyright (C) 2003-2007 Yasunari Yamashita. All Rights Reserved.
yasunari @ yamasita.jp 山下康成@京都府向日市