Thread: How does this user get screen to run under root?

  1. #1
    Banned
    Join Date
    May 2007
    Location
    Berkeley, CA
    Posts
    329

    How does this user get screen to run under root?

    The user li504 managed to get screen to run under root uid
    m-net% ps waux | grep li504
    nhard0n 16813 0.0 0.2 3764 2380 pc LNL+ 7:24PM 0:00.00 grep li504 (zsh)
    li504 2704 0.0 0.2 3244 1976 pi INs+ Mon08AM 0:00.24 /bin/bash
    li504 2588 0.0 0.2 3248 1980 pk INs Mon08AM 0:00.26 /bin/bash
    li504 2920 0.0 0.2 2060 1568 pk SN+ Mon08AM 0:02.12 screen -dr 2702
    li504 2705 0.0 0.2 3244 1976 pp INs+ Mon08AM 0:00.23 /bin/bash
    li504 2761 0.0 0.2 3244 1976 pv INs Mon08AM 0:00.32 /bin/bash
    li504 2806 0.0 0.1 2060 1540 pv SN+ Mon08AM 0:02.08 screen -dr 2586
    m-net% ps waux | grep 2702
    root 2702 44.3 0.2 2100 1648 ?? RNs Mon08AM 3214:53.34 screen
    nhard0n 16858 0.0 0.2 3764 2380 pc LNL+ 7:25PM 0:00.00 grep 2702 (zsh)
    li504 2920 0.0 0.2 2060 1568 pk SN+ Mon08AM 0:02.12 screen -dr 2702
    m-net% ps waux | grep 2586
    root 2586 39.5 0.2 2128 1676 ?? SNs Mon08AM 3213:32.88 screen
    li504 2806 0.0 0.1 2060 1540 pv SN+ Mon08AM 0:02.08 screen -dr 2586
    He is a regular user.

    m-net% id li504
    uid=46665(li504) gid=10(guest) groups=10(guest)
    How did he or she do this?

  2. #2
    and the hat of sweating
    Join Date
    Aug 2007
    Location
    Toronto, ON
    Posts
    3,545
    sudo perhaps?
    I'm not sure what that output is supposed to mean.
    "I am probably the laziest programmer on the planet, a fact with which anyone who has ever seen my code will agree." - esbo, 11/15/2008

    "the internet is a scary place to be thats why i dont use it much." - billet, 03/17/2010

  3. #3
    Making mistakes
    Join Date
    Dec 2008
    Posts
    476
    Or maybe screen is a setuid program? Meaning the kernel grants the program the permissions of somebody else, probably root?

Popular pages Recent additions subscribe to a feed

Similar Threads

  1. Replies: 4
    Last Post: 07-24-2008, 09:02 AM
  2. Feedback: Functional Specification Wording
    By Ragsdale85 in forum C++ Programming
    Replies: 0
    Last Post: 01-18-2006, 04:56 PM
  3. Converting from Screen to World Coordinates
    By DavidP in forum Game Programming
    Replies: 9
    Last Post: 05-11-2004, 12:51 PM
  4. Contest Results - May 27, 2002
    By ygfperson in forum A Brief History of Cprogramming.com
    Replies: 18
    Last Post: 06-18-2002, 01:27 PM
  5. BST/Red and Black Tree
    By ghettoman in forum C++ Programming
    Replies: 0
    Last Post: 10-24-2001, 10:45 PM