LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-22-2005, 11:12 AM   #1
Elbryan
Member
 
Registered: Feb 2005
Distribution: Gentoo
Posts: 59

Rep: Reputation: 15
Shadow File Crack


I have a simply question.
Shadow file is only accessible from root. Well.
There's a way to override this control and read the contents of this file?

Nothing is impossible .. right?

Thanks!!
 
Old 02-22-2005, 12:47 PM   #2
Aeiri
Member
 
Registered: Feb 2004
Posts: 307

Rep: Reputation: 30
Re: Shadow File Crack

Quote:
Originally posted by Elbryan
I have a simply question.
Shadow file is only accessible from root. Well.
There's a way to override this control and read the contents of this file?

Nothing is impossible .. right?

Thanks!!
The permissions disallow reading from that file, and normal users can't access the raw contents of the drive.

So, given that an attcker can't find any holes in the general GNU tools, then no there is no way to override the control.

You shouldn't allow random people to have access to your drive anyway. Run every server as a regular user, and have it in a chroot jail to prevent them from accessing files they shouldn't be.

Also, a good firewall and a good IDS system to top it off.
 
Old 02-22-2005, 05:00 PM   #3
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 677Reputation: 677Reputation: 677Reputation: 677Reputation: 677Reputation: 677
If a person can upgrade themselves to root, it's pretty much game over. He would have no need for the information in the shadow file anyway, at least on that host.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
/etc/shadow file missing Computergirl24 Linux - Software 3 08-28-2008 06:28 AM
shadow file os2 Linux - Security 3 10-18-2005 03:20 PM
/etc/shadow crack gfrair Linux - Security 3 03-06-2005 08:01 PM
shadow file stevee Linux - Security 1 10-07-2003 10:11 AM
shadow file? tjm Linux - Security 4 09-15-2003 04:23 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:48 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration