Answered step by step
Verified Expert Solution
Link Copied!

Question

...
1 Approved Answer

After discovering a vulnerability in the passwd utility, the Linux developers have decided that it is too dangerous to continue to run the utility

After discovering a vulnerability in the passwd utility, the Linux developers have decided that it is too dangerous to continue to run the utility as root (through setuid). Unfortunately, there's no Linux capability that lets a process specifically edit /etc/shadow, the file that Linux uses to store password data. Note: This problem incorrectly stated /etc/passwd instead of /etc/shadow when released. UNIX originally stored password data in /etc/passwd but this was later changed to /etc/shadow. The high-level idea of your solution should not change and we'll accept answers assuming password data is stored in /etc/passwd or /etc/shadow. What's the worst damage that an attacker can do if a new vulnerability were to be found in passwd? [10 points]

Step by Step Solution

There are 3 Steps involved in it

Step: 1

blur-text-image

Get Instant Access with AI-Powered Solutions

See step-by-step solutions with expert insights and AI powered tools for academic success

Step: 2

blur-text-image

Step: 3

blur-text-image

Ace Your Homework with AI

Get the answers you need in no time with our AI-driven, step-by-step assistance

Get Started

Recommended Textbook for

College Mathematics for Business Economics Life Sciences and Social Sciences

Authors: Raymond A. Barnett, Michael R. Ziegler, Karl E. Byleen

12th edition

978-0321614001

Students also viewed these Programming questions

Question

Name three different nuclei that contain 120 neutrons.

Answered: 1 week ago