diff --git a/platforms/linux/local/40169.txt b/platforms/linux/local/40169.txt index 0fd8ad54d..5844bcdaa 100755 --- a/platforms/linux/local/40169.txt +++ b/platforms/linux/local/40169.txt @@ -1,3 +1,5 @@ +// Source: http://blog.cmpxchg8b.com/2013/08/security-debianisms.html + On most modern Linux systems, /bin/sh is provided by bash, which detects that it's being invoked as sh, and attempts to mimic traditional sh. As everyone who works in security quickly learns, bash will drop privileges very early if uid != euid. 488