RailsCasts Pro episodes are now free!
Learn more or hide this
GitHub User: AlexeyMorozov
Hello!
May scripts from /etc/init.d/ be run by root at startup time? If so, we have vulnerability allows "deployer" user change unicorn_init.sh and get root access, havent' we?
sudo "ln -nfs #{current_path}/config/unicorn_init.sh /etc/init.d/unicorn_#{application}"
Thank you, Ryan!
Hello!
May scripts from /etc/init.d/ be run by root at startup time?
If so, we have vulnerability allows "deployer" user change unicorn_init.sh and get root access, havent' we?
sudo "ln -nfs #{current_path}/config/unicorn_init.sh /etc/init.d/unicorn_#{application}"
Thank you, Ryan!