Set-UID is an important security mechanism in Unix operating systems. When a Set-UID program runs, it assumes the owner's privileges. For example, if the program's owner is root, then when anyone runs this program, the program gains the root's privileges during its execution. Set-UID allows us to do many interesting things, but unfortunately, it is also the culprit of many bad things. The objective of this lab is for students to understand what risks such privileged programs face and how they can be attacked if there are mistakes in the code.

2. Project Tasks

Tasks 1 9 in Environment Variable and Set-UID Program Lab [See Environment_Variable_and_SetUID.pdf]

3. Project Submission and Evaluation

This is a team project. Each team can have a maximum of 3 members. On the due date, each team will turn in 1) a printed copy of the project report, and 2) an electronic copy (PDF format required) of the report submitted through the assignment facility on myASU.