On Sun, Mar 15, 2009 at 03:01:40AM -0000, Paul Dufresne wrote:
> It look a bit stupid, but maybe it is trying to become a deleted user.
> For ZDS (original poster) it would have means he would have deleted the
> "nobody" user (normally nobody have id 65534 in /etc/passwd, but I
> remember a time where I was deleting it for feeling my system more secure.
> Maybe even the user nogroup in /etc/group.
Sorry, not this either. The setuid() calls don't require that the uid has a
matching name on the system.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://www.debian.org/
<email address hidden> <email address hidden>
On Sun, Mar 15, 2009 at 03:01:40AM -0000, Paul Dufresne wrote:
> It look a bit stupid, but maybe it is trying to become a deleted user.
> For ZDS (original poster) it would have means he would have deleted the
> "nobody" user (normally nobody have id 65534 in /etc/passwd, but I
> remember a time where I was deleting it for feeling my system more secure.
> Maybe even the user nogroup in /etc/group.
Sorry, not this either. The setuid() calls don't require that the uid has a
matching name on the system.
-- www.debian. org/
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://
<email address hidden> <email address hidden>