To: proxy_user; PokeyJoe
Correct me if I'm wrong, but doesn't apt normally run as root?
28 posted on
09/21/2005 10:22:36 AM PDT by
general_re
("Frantic orthodoxy is never rooted in faith, but in doubt." - Reinhold Niebuhr)
To: general_re
Since I'm a Suse user, not Debian, I had to check what 'apt' is, but probably yes. Certainly Yast only runs as root.
That's why these automatic installers are so dangerous. They run as root so they can update the startup/shutdown scripts, but this makes them vulnerable to attacks like this.
To: general_re
apt runs as sudo (when you install) but programs can't invoke root on their own.
40 posted on
09/21/2005 2:51:36 PM PDT by
PokeyJoe
(There are 10 kinds of people in the world. Those who understand binary, and those that don't.)
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson