| 1. | As tripwire started up , it tried to create a temporary file , as many programs do
与很多程序一样， tripwire启动时会尝试着创建一个临时文件。
|
| 2. | But after tripwire checked , mallory s program then created a symlink with that very name
但是在tripwire完成检查后， mallory的程序就会使用该名称创建一个符号链接文件。
|
| 3. | This was no accident . mallory s program was designed to create the very file names most likely to be used by tripwire
这不是偶然的； mallory程序的设计目标就是创建最有可能为tripwire所使用的文件名。
|
| 4. | A security precaution on this server was that every day , it ran the security program tripwire - specifically , the older version , 2 . 3 . 0
这台重要的服务器的安全措施之一是，它每天都运行tripwire具体地说，是较老的2 . 3 . 0版本。
|
| 5. | Tripwire looked and found that there was no file named tmp twtempa19212 , so that appeared to be a good name for a temporary file
Tripwire会查看并断定不存在名为“ / tmp / twtempa19212 ”的文件，所以看起来这是一个合适的临时文件名称。
|
| 6. | Tripwire then opened up the file and starting writing temporary information . but instead of creating a new empty file , tripwire was now overwriting the password file
然后tripwire就会打开该文件，开始写入临时信息，但不用创建新的空文件， tripwire现在正在重写口令文件！
|
| 7. | For example , tripwire v2 . 3 . 0 determined that a certain file didn t exist , and then tried to create it , not taking into account that the file could have been created by an attacker between those two steps
例如，如果tripwire 2 . 3 . 0确定某个文件不存在，它就会尝试着创建该文件，而不去考虑在进行这两个步骤期间，该文件是否已经被攻击者创建。
|
您当前位置：