But after tripwire checked , mallory s program then created a symlink with that very name 但是在tripwire完成檢查后, mallory的程序就會(huì)使用該名稱創(chuàng)建一個(gè)符號(hào)鏈接文件。
When accessed , a symbolic link file , also called a symlink , redirects the requester to another file (符號(hào)鏈接文件也稱為symlink ,是一種簡(jiǎn)單的文件,當(dāng)被訪問(wèn)時(shí),它會(huì)將請(qǐng)求重定向到另一個(gè)文件。
Mallory s program kept creating and removing many different symlinks pointing to the same special file : etc passwd , the password file ) mallory的程序不停地創(chuàng)建和刪除很多指向同一特殊文件( / etc / passwd ,口令文件)的不同符號(hào)鏈接文件。
Mallory installed and ran a trivial program with odd behavior : it quickly created and removed many different symbolic link files in the tmp directory , using a multitude of processes Mallory安裝并運(yùn)行了一個(gè)行為非常奇怪的小程序,該程序使用多個(gè)進(jìn)程在/ tmp目錄下快速地創(chuàng)建和刪除很多不同的符號(hào)鏈接文件。
For example , if a privileged program checks if there s no file of a given name , and then opens for writing that file , an attacker could create a symbolic link file of that name between those two steps to etc passwd or some other sensitive file , for instance 例如,如果某個(gè)已授予特權(quán)的程序檢查是否不存在給定名稱的文件,然后打開(kāi)該文件寫(xiě)入信息,那么在那兩個(gè)步驟之間,攻擊者可以創(chuàng)建一個(gè)使用該名稱的符號(hào)鏈接文件. .