[BusyBox] BusyBox suid-wrappers, part 111

Vladimir N. Oleynik dzo at simtreas.ru
Sat Jan 27 16:38:14 UTC 2001


Tomi Ollila wrote:

> bbsl would be new busybox applet; it only needs first to parse through
> first newline of the file, and then compare each whitespace separated
> string with the command name and if match is found,
> run /bin/busybox <command> <args...>. And more suid binaries are easy
> to add, make them sym/hardlinked to this "script" and add the binary
> name to the same script.

+ variant

wrapper-code have:
char prg_name[MAX_PATH]="/////////////////////";

suid-generator (not have suid, only for root usage) do
copy wrapper-code (not have +x bit to all) to require place and name,
find "////////////////" and replace to "ping\0" (for example),
and set +x +s (and not always for a root).

This method also works for creation suid to the user. :)


--w
vodz





More information about the busybox mailing list