拓胜科技-MUD安全`.pdf

mud editLPMUD OS LIB 100 LPC es2 MUDLIBbig5 Annihilator es2 mudlib mud es2 es2 mud LPMUD *** mudlib *** MASTER_OB /adm/obj/master.c mudos mudlib SECURITY_D /adm/daemons/securityd.cMASTER_OB call_other mudlib shell /adm/etc/wizlist SECURITY_D promote /cmds/arch/ this_player(1) mudlib promote SECURITY_D set_status() previous_object(0) find_object(/cmds/arch/promote) clonep return 0 MASTER_OB valid_seteuid()call_other SECURITY_D seteuid(getuid()) ROOT_UID SIMUL_EFUN_OB seteuid 1/10 LOGIN_OB restore_object LOGIN_OB query_save_file() query(id,1) LOGIN_OB set ROOT_UID nomask mixed set(string prop, mixed data) if( geteuid(previous_object()) != ROOT_UID ) return 0; euid LOGIN_OB USER_OB valid_write if( func==save_object ) { if( sscanf(file,/obj/login/%*s) || sscanf(file,/obj/user/%*s) ) { string id; if(sscanf(file,sprintf(/obj/login/%c/%%s.o,euid[0]),id) (id == euid) ) return 1; if(sscanf(file,sprintf(/obj/user/%c/%%s.o,euid[0]),id) (id == euid) ) return 1; } else } ROOT_UID LOGIN_OB USER_OB LOGIN_OB-query(password) RO