Re: FIX: World-writeable files repair script

[Keith Owens <kaos@melbourne.sgi.com>]

On 02 Aug 2001 13:50:32 -0500, 
Eric Sandeen <sandeen@sgi.com> wrote:
>Here's a script that should fix all the mis-permed files that may be
>lurking out there...  Sending this out now to get feedback before I
>unleash it on the world at large.

Add /lib/modules/*/modules.dep.  If that file is world writable you
have a local root exploit.  Due to the kernel bug, this has occurred on
Slackware installs.  As part of that exploit, people reported that
/var/log/wtmp and /var/run/utmp are also created with the wrong mask.
Not exploitable AFAIK but you can hide tasks if utmp is world writable.