T - tripwire 中文 - EN166

tripwire 絆網，地雷拉發線。

triquetrous
For example , tripwire v2 . 3 . 0 determined that a certain file didn t exist , and then tried to create it , not taking into account that the file could have been created by an attacker between those two steps 例如，如果tripwire 2 . 3 . 0確定某個文件不存在，它就會嘗試著創建該文件，而不去考慮在進行這兩個步驟期間，該文件是否已經被攻擊者創建。
Tripwire then opened up the file and starting writing temporary information . but instead of creating a new empty file , tripwire was now overwriting the password file 然后tripwire就會打開該文件，開始寫入臨時信息，但不用創建新的空文件， tripwire現在正在重寫口令文件！
Tripwire looked and found that there was no file named tmp twtempa19212 , so that appeared to be a good name for a temporary file Tripwire會查看并斷定不存在名為“ / tmp / twtempa19212 ”的文件，所以看起來這是一個合適的臨時文件名稱。
A security precaution on this server was that every day , it ran the security program tripwire - specifically , the older version , 2 . 3 . 0 這臺重要的服務器的安全措施之一是，它每天都運行tripwire具體地說，是較老的2 . 3 . 0版本。
This was no accident . mallory s program was designed to create the very file names most likely to be used by tripwire 這不是偶然的； mallory程序的設計目標就是創建最有可能為tripwire所使用的文件名。
But after tripwire checked , mallory s program then created a symlink with that very name 但是在tripwire完成檢查后， mallory的程序就會使用該名稱創建一個符號鏈接文件。
As tripwire started up , it tried to create a temporary file , as many programs do 與很多程序一樣， tripwire啟動時會嘗試著創建一個臨時文件。