Re: What happens to the AppKit Framework when an user logout ?
Re: What happens to the AppKit Framework when an user logout ?
- Subject: Re: What happens to the AppKit Framework when an user logout ?
- From: Julien Jalon <email@hidden>
- Date: Wed, 17 Oct 2001 18:08:15 +0200
From Cocoa-dev mailing list.
Login as a guest user
Launch Terminal
Quit Terminal
Launch NetInfo Manager
Select in the Recent items menu: Terminal
You're root. (I just had a fear while writing this that the account I
used was an admin one, but I just checked and it's not an admin
account)
I have not had the possibility to check what happens if you had not
enabled the root account via NetInfo or sudo passwd root
I can confirm this. I just tried this, from admin & non-admin logins,
with root disabled in NetInfo manager - and it makes me root. D'Oh!
The NetInfo Manager application is suid:
/Applications/Utilities/NetInfo Manager.app/Contents/MacOS % ll
total 360
-rwsrwxr-x 1 root admin 180584 Sep 15 05:56 NetInfo Manager*
^^^^
NetInfo Manager is always launched as root, whoever you are! So whatever
NetInfo Manager will do, it will be done as root, including launching
Terminal. With this HUGE hole, you can launch whatever application you
want as root.
That's a big mistake of Apple developers and I don't understand why they
did that because it's obvious that a setuid application is very weak
--Julien Jalon