Re: sudoers security question

2023-10-30 Thread ToddAndMargo via users
On 10/30/23 18:36, Samuel Sieb wrote: On 10/30/23 18:15, ToddAndMargo via users wrote: Hi All, It seems to me that since /etc/sudoers is visible from a standard user account, that all a bad guy has to do is cat the file, find some program that is elevated, then overwrite that program with his e

Re: sudoers security question

2023-10-30 Thread ToddAndMargo via users
On 10/30/23 19:11, Todd Zullinger wrote: Samuel Sieb wrote: On 10/30/23 18:15, ToddAndMargo via users wrote: Hi All, It seems to me that since /etc/sudoers is visible from a standard user account, that all a bad guy has to do is cat the file, find some program that is elevated, then overwrite

Re: sudoers security question

2023-10-30 Thread Todd Zullinger
Samuel Sieb wrote: > On 10/30/23 18:15, ToddAndMargo via users wrote: >> Hi All, >> >> It seems to me that since /etc/sudoers is visible from a >> standard user account, that all a bad guy has to do is >> cat the file, find some program that is elevated, then >> overwrite that program with his evi

Re: sudoers security question

2023-10-30 Thread Samuel Sieb
On 10/30/23 18:15, ToddAndMargo via users wrote: Hi All, It seems to me that since /etc/sudoers is visible from a standard user account, that all a bad guy has to do is cat the file, find some program that is elevated, then overwrite that program with his evil deeds, and boom, you are hacked. A

sudoers security question

2023-10-30 Thread ToddAndMargo via users
Hi All, It seems to me that since /etc/sudoers is visible from a standard user account, that all a bad guy has to do is cat the file, find some program that is elevated, then overwrite that program with his evil deeds, and boom, you are hacked. Am I missing something? -T -- ~~