4 ms·
AFAIK that suid binary was used to enable starting the X server without a display manager. It still actually ran as non-root.
by chousuke 8y ago
AFAIK that suid binary was used to enable starting the X server without a display manager. It still actually ran as non-root.
- ben_bai 8y agoIt was setuid root but dropped privilege, but the dropping privilege came after parsing the command arguments and doing initialization, so there was a small time window while it still runs as root and in that time it could be tricked into overriding any file.