Question about LINK security.
I'm doing a presentation on Linux security and I was wondering if it was possible to change a link to point to a different file without destroying the link.
My question stems from the idea that a user could find a binary that is globally writable and modify it to do his dirty work as root user. For this presentation, I'm setting up my own Linux box to hack it to pieces. What I plan to do is add a group-writable path to the global path and then demonstrate how this can be exploited.
I was also wondering if links were secure if they're pointing to a file that is not group-writable. I've noticed on our school's system that all the links available in the path are globally 'rwx' though the files they point to are not. I'm guessing that means the files are still secure, but I would just like clarification, explanation and or a good reference to back up this claim.
Thanks in advance for any reply!
|All times are GMT -5. The time now is 10:53 PM.|