Collaborate Disseminate
I am wondering what attacks would be theoretically possible against a Python script that executes a subprocess involving sudo. I know that asking for the sudo password using input() or getpass(), then passing it to the subprocess’s stdin c… Continue reading How to exploit Python script and sudo subprocess shared file handle?
My ~/.bash_aliases contains aliases such as the following examples:
alias duh="sudo du -sh ./* | sort -hr | head -n 10"
alias pcm="sudo pcm -nc -nsys"
Question is, how smart that is, I suspect that an attacker with non… Continue reading Is it wise to use sudo in .bash_aliases?
I am trying to reproduce the aforementioned CVE with sudo version 1.9.5p1.
However, when I try to do sudoedit -s ‘AAAAAAAAAAA\’ I get vim opened without nothing else.
What could be the problem? How can I reproduce the crash?
Continue reading Reproduce CVE-2021-3156 on sudoedit [closed]
There was a time when real system administrators just logged into Unix systems as root. But as we all know — with great power comes great responsibility. It’s too easy …read more Continue reading Linux Fu: The Root Cause
Is there any way to positively identify that sudo is being used to execute a command other than to identify the logs? I phrase this in the present tense because I would like to make a command fail if it detects that someone else is using … Continue reading Detecting sudo use without logs [migrated]
Sudo has been with us for over 40 years, and it has several CVEs reported and fixed every year. The tool must have been in the spotlight for its inherent involvement in computer security and widespread use, so one might be tempted to belie… Continue reading What makes sudo so hard to secure? [closed]
I often need to run commands with sudo during development and since my password is lengthy I don’t like to type it every time sudo times out which by default is 5 minutes.
To deal with that I’ve run sudo visudo and have set Defaults timest… Continue reading Security implications of increasing sudo timeout in terminal
I have a main user with home folder encryption enabled. To avoid typing long phrase each time I want to have another user with sudo privilege and weak password.
In the terminal I would first switch user to further do any admin work
main@ma… Continue reading Sudo user without ability to login
Given that I’m the only human who should have access to a Linux server, what are the major security risks associated with updating sudo to not require a password for my local user?
Are there other ways of making sudo less cumbersome witho… Continue reading Risks and recommendations of using passwordless sudo
I’m working with a customer where I use a functional user ID, created specifically for the purpose, to install and configure some software on multiple servers. The customer’s security policies, explained to me verbally, allow them to give … Continue reading The rationale behind allowing `sudo -u root` but disallowing `sudo -u <any other user>`