Hi Max,

On 2010-06-02 23:21, [email protected] wrote:

You have a way to intercept the crypt call (I think a user level library
routine) from  within kmdb?

Directly - of course not. But I can intercept read(libc.so).

You are right - probably it's more complex than track read(/etc/shadow) - have to try it by my own hands before any further
discussion ;)

-Dmitry



max

Dmitry Samersoff wrote:
Rao,

Yes it's a little bit an overkill - personally I would intercept
crypt call and make any password acceptable or something like this.

But the idea it self is outstanding ;-))


On 2010-06-02 19:20, Rao Shoaib wrote:
Piotr Jasiukajtis wrote:
Hi,

I have to say that is really an outstanding blog post :)

http://blogs.sun.com/vallishguru/entry/using_kmdb_to_reset_lost

This seems like a more involved process than necessary. Why not just
change the in-kernel cred value of the ordinary user to that of root and
than just use normal utilities to change the passwd.

Rao.

_______________________________________________
mdb-discuss mailing list
[email protected]





--
Dmitry Samersoff
J2SE Sustaining team, SPB04
* Give Rabbit time and he'll always get the answer ...
_______________________________________________
security-discuss mailing list
[email protected]

Reply via email to