4 ms·
If the attacker can control newroot/etc/passwd they _still_ get getpwnam to return whatever userid they want. The solution is to not lookup --userspec=username:
by geocar 5mo ago
If the attacker can control newroot/etc/passwd they _still_ get getpwnam to return whatever userid they want. The solution is to not lookup --userspec=username:group inside the chrooted-space, but from outside.
Also, hi how's things? :)
- justincormack 5mo agohi! good, how are you doing?
- geocar 5mo agogreat. still enjoying the algarve working on my secret projects in the sun. you able to find a reason to come visit? or am i going to have to come to blighty so we can hang out?