egghelp/eggheads community

root adds himself .. any help?

2003-03-19T16:35:22-04:00

well..n is there..
sharing works fine..hub refuses all +m and +n changes..these flags can be changed/added only on hub..

problem is..when someone edit the bot's userfile (editing userfile in shell..not via bot..and not userfile of passive bot)..he can remove the +p flag from passive bot..but the bot still can be linken to te botnet (without userfile sharing)..
now what I need is: hub(passive bot) should link to some bot ONLY if userlist would be SHARED..if userlist wouldn't be shared, hub should diskonect that bot..

that could be fixet with some tcl on hub..

ppslim..thanx for dealing with my problem..

tex..

Statistics: Posted by Tex — Wed Mar 19, 2003 4:35 pm

root adds himself .. any help?

2003-03-19T15:09:31-04:00

I now realise what is agt issue here.

Please see the "set private-globals" setting. You need the "n" flag listed here.

Statistics: Posted by ppslim — Wed Mar 19, 2003 3:09 pm

root adds himself .. any help?

2003-03-19T14:27:49-04:00

well..still don't know how to fix it..

Statistics: Posted by Tex — Wed Mar 19, 2003 2:27 pm

root adds himself .. any help?

2003-03-19T13:14:26-04:00

it's not "shell provider"..my friends server on adsl..

Statistics: Posted by Tex — Wed Mar 19, 2003 1:14 pm

root adds himself .. any help?

2003-03-19T13:11:37-04:00

What shell provider is this if you dont mind I would like a heads up not to use this provider thats for sure...

Clipped

Statistics: Posted by Clipped — Wed Mar 19, 2003 1:11 pm

root adds himself .. any help?

2003-03-19T12:38:35-04:00

well..can I link two bots only with shared userlists?If the hub wouldn't link without sharing - everything would be ok.."set private-user 1" on hub forces all userlist changes to be made via hub..I know that he would still be able to add himself..but than he could control only the bot that runs on his server..I just don't wan't him to have acces to all bots..
I know what root can do and what can't do.. but on this shell I'm not sure if I can trust to all of them (yes..more users have root permissions)..
oh dear..god bless my english..

tex..

Statistics: Posted by Tex — Wed Mar 19, 2003 12:38 pm

root adds himself .. any help?

2003-03-19T12:08:55-04:00

The root user has complete control over a machine. From hardware, software all the way to internet connections and file contents.

With every shell account, you have to trust that the root user, will not tamper with your files, or add himself to your bot.

As noted, if you can't trust them not to do this, then get rid of them.

There is no way at all to prevent the root user from changing the userfile, and adding himself.

Statistics: Posted by ppslim — Wed Mar 19, 2003 12:08 pm

root adds himself .. any help?

2003-03-19T11:45:44-04:00

rm -rf ~/

...if you can't trust root, you can't trust a eggdrop running on the box.

Statistics: Posted by user — Wed Mar 19, 2003 11:45 am

root adds himself .. any help?

2003-03-19T11:26:45-04:00

hi..first..my english is baad..so don't laught please..

problem..root adds himself to te userfile as +n by editing the bots userfile and have complete acces to the botnet..this bot is a shared bot..not a hub..
I tried to set the "set private-user" to 1 on hub..but..he can still remove the hubs +p flag and than add himself..and he has again acces to the botnet..via commands like .netjoin .netsay ...

wondering how to fix that..?

tex..

Statistics: Posted by Tex — Wed Mar 19, 2003 11:26 am