[net.micro.att] setuid /bin/mv

reeds@alice.UUCP (Jim Reeds) (07/29/85)

About the setuid root version of /bin/mv distributed with the 7300
UNIX PC.  One can indeed become super user by typing the commands

	mv myversion /etc/passwd
	su

Marty Shannon pointed out to me a few minutes ago, however, that
this  problem can be fixed by using chmod to allow only the owner to
have write permission to /etc.  He suggests 

	chmod go-w /etc

On my machine this seems to fix the problem.
This is a pretty shrewd thing to do in any case, even if you are
not worried about illicit super user-hood: you cut down the chance
of accidental trashing of the vital /etc/init, /etc/getty, etc, etc,
without which there would be no joy.


Jim Reeds