Collaborate Disseminate
I’m learning about linux hardening and I’m creating a sudoers file. My idea is to separate things. There will be a user to see log files, another that can sudo to manage system processes, another for network managements, and so on and so f… Continue reading Linux access control policies sudoers
I’m learning about linux hardening and I’m creating a sudoers file. My idea is to separate things. There will be a user to see log files, another that can sudo to manage system processes, another for network managements, and so on and so f… Continue reading Linux access control policies sudoers
You can hardly mention the sudo command without recalling the hilarious XKCD strip about making sandwiches. It does seem like sudo is the magic power to make a Linux system …read more Continue reading Linux Fu: Superpowers for Mere Mortals
According to recent sudo issues, I want to remove its package from my machine and use root instead (for just related stuff – not all the time – like update and …). But I have an issue that launching Veracrypt via root is not a wise choic… Continue reading how to create a user specifically for opening veracrypt [migrated]
As we all know when using Linux it’s safest to operate on a non-root user. As it’s also known, when a non-root user has sudo permissions they can use it to escalate privileges and pop a root shell. I was testing the privesc potentials of m… Continue reading Non-admin user with privesc capability though sudo
Is there a security difference between doing
sudo make install
versus two step
sudo su
and then typing
make install
The reason I’m asking is because a security requirement to install some software says you must type exactly ‘make instal… Continue reading security difference between sudo make install versus sudo su make install
I am trying to grasp some basic principles of security in Linux (I used Centos 8.0 and Kali 2020 in the example below).
I found that providing you have an account in a particular system that is in the /et/sudoers and its entry is ALL=(ALL)… Continue reading Shell escaping vs. /etc/sudoers. What’s the difference?
I have used user groups heavily while designing access control policies. I find user groups very convenient as it’s very easy to implement with PAM.
Another reason I have organized the users with various groups is to implem… Continue reading Is it good or bad to use group in sudoers file instead of using aliases?
The Sudo command can give you root access when it shouldn’t. Sky falling?
The post Sudo Read This Warning About LPE Bug in Sudo appeared first on Security Boulevard.
Continue reading Sudo Read This Warning About LPE Bug in Sudo
via the inimitable Daniel Stori at turnoff.us
The post Daniel Stori’s ‘sudo’ appeared first on Security Boulevard.
Continue reading Daniel Stori’s ‘sudo’