Collaborate Disseminate
I have noticed several questions on Stack Overflow, like this one, about executing commands with root privileges using PHP. The answer proposed to add the line
www-data ALL=(ALL) NOPASSWD: ALL
to the /etc/sudoers.d file.
Is it a safe a… Continue reading Is it safe to allow www-data to execute privileged commands?
The Linux ether-wake utility, which creates a magic packet to wake on lan another machine, requires root access:
$ether-wake 12:34:56:78:9A:BC
ether-wake: This program must be run as root.
To give access to an arbitrary us… Continue reading What are the risks of making ether-wake available to all users?
SSH with public-private key authentication comes enabled by default with most Linux distributions. This is great because when I create accounts for remote users I don’t have to email them sensitive info(passwords).
However, this process b… Continue reading SSH key auth, but still need password for sudo?
In Linux, do sudo and su belong to Capability-based security ?
For example, when editing a system file, we usually need sudo or su to temporarily switch to user root. Does this example belong to capability-based security, or to protection… Continue reading Do `sudo` and `su` belong to capability-based security?