Vulnerability Development: volcheck and sol 8

[mpotter () ATPCO COM (Matthew Potter)]

Anyone notice when they insert their goodies CD(the one with the GNU Tools)
from Solaris 8 that it auto runs a script called volstart.

So what happens if I make my own CD with a little shell script which calls
a prebuilt binary with a setuid and setgid 0 , then system("/bin/sh")....
or what ever i want. THis is DEFAULT behavior. I am sure you would disable
it from running in vold.conf.

It's silly since i have physical access anyways....

matt