Collaborate Disseminate
I often need to run commands with sudo during development and since my password is lengthy I don’t like to type it every time sudo times out which by default is 5 minutes.
To deal with that I’ve run sudo visudo and have set Defaults timest… Continue reading Security implications of increasing sudo timeout in terminal
I have a main user with home folder encryption enabled. To avoid typing long phrase each time I want to have another user with sudo privilege and weak password.
In the terminal I would first switch user to further do any admin work
main@ma… Continue reading Sudo user without ability to login
Given that I’m the only human who should have access to a Linux server, what are the major security risks associated with updating sudo to not require a password for my local user?
Are there other ways of making sudo less cumbersome witho… Continue reading Risks and recommendations of using passwordless sudo
I’m working with a customer where I use a functional user ID, created specifically for the purpose, to install and configure some software on multiple servers. The customer’s security policies, explained to me verbally, allow them to give … Continue reading The rationale behind allowing `sudo -u root` but disallowing `sudo -u <any other user>`
Windows only show [Yes] or [No] for the same thing as Linux’s sudo. macOS/Linux both require you to type the password. Is the password-less Windows implementation almost as secure as password-requiring macOS/Linux’s impersonations? If so, … Continue reading Is Windows UAC’s clicking OK authentication as secure as macOS/Linux’s password authentication?
This question relates to a comment on a question I posted at https://askubuntu.com/questions/1426688/sudo-with-a-userid-reverting-old-behaviour?noredirect=1#comment2484447_1426688
Specifically, in Ubuntu 18.04 I could run a command like &q… Continue reading sudo with a USERID
TL;DR: running npm i … not long after pass my-password allows a malicious package to steal my entire password store.
I use pass as a password manager, on Linux. And like probably all Linux users, I use sudo to run commands as root.
The … Continue reading How to securely use `pass`, `sudo`, and `npm` on the same machine
If there is a program written by a normal user that requires root privileges (eg. a program that interacts with root processes) what is the difference between running this program using sudo vs. changing the program permissions with chown … Continue reading Security difference between changing permissions versus using sudo to execute
I had a debate with a friend about the security model in new OS X versions. OS X El Capitan and newer have the System Integrity Protection security feature which protects aspects of the OS even from root users.
My friend claimed that it’s … Continue reading Read files protected with System Integrity Protection with sudo
I want to use gpg from another user (user2), so that the primary user (user1) does not have access to the encrypted file, but only to the part the script will output.
Added a sudo rule for user1 to run /bin/gpg as user2. When I try to exec… Continue reading Using GPG from another user (GNU/Linux)