App - Script

Hi, I’m stuck on first challenge. Can anyone help me?
Thanks!

Where do you stuck?

Hello,

I don’t really understand the challenge.. What are we supposed to do exactly?

Hey.

Same here, I would like to edit the C file to be able to read the .passwd after recompilation (due to the r-s right). But I don’t know how I am able to change right on the C file even if I am the owner :x
It said i haven’t permission.
Am I on the right way ?

What we have to do exactly? i mean we dont have write permissions for ch11.c and we’re gonna read that .passwd file how? that what i was thinking .... to edit ch11.c and cat .passwd file but we don’t have write permission... im confused what to do here?

The related material for this challenge indicates:

– EN Dangers of SUID Shell Scripts (Administration/Unix)
– EN SUID Privileged Programs (Administration/Unix)

Are you familiar with SUID? What is it? What can be dangerous about it?

I’m stuck on this one also. I have managed to edit the ch11.c file and I chmod 777 ch11 (not sure if thats right) but when I "./ch11" it still gives me "Permisson denied". I’m clearly missing something. Am I going wrong somewhere here or have a missed something on the way?

You have to think about the permissions of the file you want to read, and about what happens with a program that executes with other permissions. And of course waht happens when you compile a program, what permissions have this program have you compiled, are that enough to read the file?
TIP! I mean user and group permissions, not the read-write-execute permissions you can manage with chmod

I tried to modify PATH to /var/tmp and execute cat bash script, but it fails with permissions.
I thought we could manage to run our commands by modifying LD_PRELOAD variable. But it also fails.

Should I keep on thinking about other possibilities, or I’ve done something wrong in my current implementations?

Thanks in advance

The related material for this challenge indicates:

– EN Dangers of SUID Shell Scripts (Administration/Unix)
– EN SUID Privileged Programs (Administration/Unix)

maybe you should take care of this, hopefully this can help .

by the way, God is not only ’God’, It can be everything.

SUID is about assigning temporary permissions to files when they are executed by a user.

You may not need to edit the ch11.c file.