4 ms·
sudoers here I come!
by yborg 7y ago
sudoers here I come!
- Hackbraten 7y agoHow would the sudoers file help here?
- ggm 7y agoNo. The op means: now a non admin user can trivially get write permission on sudoers file and become root.
- kccqzy 7y agoThe usual UNIX permissions checking doesn't get bypassed, does it? This is additional.
- ggm 7y agoI don't know. I'm not addressing the underlying problem and it's veracity, I'm addressing the semantic confusion of op's intent regarding edit of the sudoers file.
- Izmaki 7y agoThat would be insane.
- yborg 7y agoAlas, this approach does not yield fruit for the traditional core Unix files such as in /etc, these are not exposed through the Finder interface. However there are a lot of potentially sensitive files that could be trivially replaced by modified versions if this tactic works everywhere, i.e. /System/Library/Security/authorization.plist
- saagarjha 7y ago> Alas, this approach does not yield fruit for the traditional core Unix files such as in /etc, these are not exposed through the Finder interface. ⇧⌘G in Finder, type in /etc and press enter.
- yborg 7y agoLearn something new every day! Should have thought of 'open' though. So if I do this "Terminal drop" thing on a plain file (like sudoers) I gain no special powers, Unix perms still apply. So maybe this only does something on directories.
- aasasd 7y ago> these are not exposed through the Finder interface Just press cmd-shift-dot.
- kccqzy 7y ago> these are not exposed through the Finder interface. cd /etc && open .
- saagarjha 7y ago"open /etc" works too.
- comex 7y agoCorrect, it does not bypass Unix permissions.