Collaborate Disseminate
Is there a security difference between doing
sudo make install
versus two step
sudo su
and then typing
make install
The reason I’m asking is because a security requirement to install some software says you must type exactly ‘make instal… Continue reading security difference between sudo make install versus sudo su make install
I like to be able to run some commands installed via Homebrew without typing my sudo password. The problem is that Homebrew installs everything with user permissions, so if I add the executables to sudo’s NOPASSWD list (via user ALL = (ALL… Continue reading Homebrew and NOPASSWD sudo
I want to split my terminal sessions to different users, to compartmentalize them.
If I sudo -i -u user1 in one terminal window,
can user1 attack my main session?
Everyone talks about sudo to escalate privileges, but I want to reduce them…. Continue reading Reverse sudo – sudo ro untrusted user
I am a business owner with a strong technical background, say a programmer, though not an advanced system administrator. I’ve bought a VPS server where I want to host several applications and webpages. One of the apps consists of a back en… Continue reading Properly granting restrictive administrative privileges to developers on a production server [closed]
There are two ways I can think of doing this:
On a system with sudo, by modifying /etc/sudoers.
On a system without sudo (such as a Docker environment), by writing a program similar to the below and setting the setuid bit with chmod u+s…. Continue reading What are the potential vulnerabilities of allowing non-root users to run apt-get?
Once an attacker has a shell as your sudoer user (or just compromised a local process enough), he/she can use one of the many privilege escalation tool to even automatically put themselves for example as apt or some other processed called … Continue reading Is `sudo` almost useless?
I have access to a server via RCE over http. I can send post requests to the server which results in command execution. I am attempting to escalate privileges via sudo (su is not installed).
The server is heavily firewalled with egress fi… Continue reading Exectuting sudo command in one line within a non-tty shell
For Example
Is it safer to do:
$ sudo [cmd] [args] [enter user password]
or
$ su – [enter root password]
# [cmd] [args]
I always assumed they are the exact same thing, because sudo utilizes setuid-root, so the process that is … Continue reading Does sudo ever de-escalate privilege while the program/command/service is running?
I’m the admin of a small Linux server owned by a relative of mine. He’s fairly tech savvy, but more at a level of a power user than an expert. I want to make a handy visual tool for him that would allow to do some simple server tasks: add/… Continue reading Rate my idea: NodeJS as root behind Apache as a proxy with password
Is this recommended and/or possible? I just don’t like the idea of anyone beside me being able to see when I type my password.
Continue reading Using a pen drive + secure certificate instead of sudo passwords