From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1MdYgg-0002S3-6a for garchives@archives.gentoo.org; Wed, 19 Aug 2009 00:05:58 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CF21CE04E6; Wed, 19 Aug 2009 00:05:56 +0000 (UTC) Received: from smok.cc.flinders.edu.au (smok.cc.flinders.edu.au [129.96.252.18]) by pigeon.gentoo.org (Postfix) with ESMTP id 845E0E04E6 for ; Wed, 19 Aug 2009 00:05:56 +0000 (UTC) Received: from smok.cc.flinders.edu.au (localhost.localdomain [127.0.0.1]) by localhost.localdomain (Postfix) with SMTP id 1D7D5672B2 for ; Wed, 19 Aug 2009 09:35:50 +0930 (CST) Received: from viper.cc.flinders.edu.au (viper.cc.flinders.edu.au [129.96.252.35]) by smok.cc.flinders.edu.au (Postfix) with ESMTP id EC4D16723F for ; Wed, 19 Aug 2009 09:35:49 +0930 (CST) Received: from venus.localnet (unknown [129.96.152.67]) by viper.cc.flinders.edu.au (Postfix) with ESMTP id DFBA89E759 for ; Wed, 19 Aug 2009 09:35:49 +0930 (CST) From: Shawn Haggett To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: I lost the ability to boot into single user Date: Wed, 19 Aug 2009 09:35:50 +0930 User-Agent: KMail/1.11.4 (Linux/2.6.30-tuxonice-r4; KDE/4.2.4; x86_64; ; ) References: <200908190120.53264.alan.mckinnon@gmail.com> <1250639250.5388.8.camel@centar.nbk> In-Reply-To: <1250639250.5388.8.camel@centar.nbk> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200908190935.50109.podge@podgeweb.com> X-PMX-Comment: Flinders outgoing mail X-Archives-Salt: cbd98b3e-0fdf-44ca-bbab-e1518db43d72 X-Archives-Hash: ba7ffdbf041252042e408285d0ba447f On Wednesday 19 August 2009 09:17:30 Albert Hopkins wrote: > On Wed, 2009-08-19 at 01:20 +0200, Alan McKinnon wrote: > > > In a pinch, you can also use the argument init=/bin/bash to get a > > > bash shell up without using init. It's saved me a CD or a heap of > > > trouble a few times. > > > > Wait until some bastard runs > > > > mv /bin/bash /bin/bash.gotcha > > > > then you try init=/bin/bash :-) > > > > It causes utter carnage, without another shell handy, you do need a CD > > to get > > around that one. > > Hmm.. let's see, who could successfully run that command? > > $ ls -ld /bin /bin/bash > 4.0K drwxr-xr-x 2 root root 4.0K 2009-08-17 12:56 /bin/ > 864K -rwxr-xr-x 1 root root 861K 2009-08-15 20:46 /bin/bash* > > Oh, the same "bastard" who can 'passwd root' or 'rm -rf /' or pretty > much anything else. > > So if you have a person who has the capability and will to do that then > I think you have far more to worry about. > > So the moral to the story is don't give root access to "bastards". Does that include bastard operators? Or only when they come from hell? :P Shawn