Bugtraq mailing list archives

linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot

From: domingos.bruges () ISCTE PT (Domingos Bruges)
Date: Wed, 30 Jun 1999 23:32:14 +0100


Greetings you all,

I'm not sure that what I'm about the say does really work, but i've
tested it successfully in 3 RedHat 6.0 boxes with (1.14 - subrev 4).

If you use linuxconf  in order to create / edit any user
system priviledges, you may notice that if you set a user to have Denied
priviledges on the shutdown command he can stil be able to reboot / shutdown it.
It seems that linuxconf isn't dealing correctly with /etc/pam.d/reboot

PS: sorry for my rubish english

================================================================================
Domingos Bruges  --      domingos.bruges () iscte pt        --      [ BeBe @ irc.ptnet.org ]
      Eng' Telecomunicacoes e Informatica @ ISCTE      --      [ www.iscte.pt ]        --      netwrk adm
                 "Whitout fools there will be no whisdom"
================================================================================

Current thread:

Re: ircd exploit in ircu based code (fwd) Andrea Cocito (Jul 14)
- linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot Domingos Bruges (Jun 30)
  - Re: linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot Marcelo Roccasalva (Jul 21)
- Re: ircd exploit in ircu based code (fwd) Matt Hallacy (Jul 15)
  - Re: ircd exploit in ircu based code (fwd) Andrea Cocito (Jul 16)
- Logic Error in Management Edition NetWare install script for Dr. Sololomon's Bayard G. Bell (Jul 16)
- AMaViS virus scanner for Linux - root exploit Chris McDonough (Jul 16)
  - CERT Advisory CA-99.08 - cmsd Aleph One (Jul 16)
  - Re: AMaViS virus scanner for Linux - root exploit Kurt Seifried (Jul 17)
    - Re: AMaViS virus scanner for Linux - root exploit Ian Whalley (Jul 19)
  - Swish-e Jean-Georges Estiot (Jul 17)
  - Re: AMaViS virus scanner for Linux - root exploit Chris McDonough (Jul 18)

(Thread continues...)