3 ms·
So, you send someone a script... And they just run it? If they do, then it doesn't matter if it uses/fakes sudo, or not. They have some bigger problems.
by Jnr 6y ago
So, you send someone a script... And they just run it?
If they do, then it doesn't matter if it uses/fakes sudo, or not. They have some bigger problems.
- nelgaard 6y agoBut that is one reason I do use sudo. I have some extra user accounts that I can sudo into to run scripts, plugins etc from e.g., github that I trust somewhat but not 100 percent. In case they do start mining bitcoins or sending spam mail I will find out and stop it.
- dTal 6y agoIf that's your threat model (untrusted script = owned) then don't even bother creating a user account. Just run as root.