Unix Security

• Each running process contains a used ID number or UID

• This represents the user who "owns" the process

• The UID is the controlling piece of information when the process wants to do something

  • Such as opening a file

  • Or killing another process

• Special case:

  • UID=0 disables all the checking!

  • "root" user

• "Holy grail" of attack:

  • Process with UID 0 running my instructions

Next

Copyright © 2005 M. J. Dominus