3 ms·
macOS doesn't have sudoedit, but you can make a symlink to it, as sudo is effectively a multi-call binary: ln -s `which sudo` sudoedit and then call it:
by bonyt 6y ago
macOS doesn't have sudoedit, but you can make a symlink to it, as sudo is effectively a multi-call binary:
ln -s `which sudo` sudoedit
and then call it:
./sudoedit
So don't take the lack of a `sudoedit` command as evidence that a system isn't vulnerable. I don't know if the sudo included with macOS has been exploited though.
- brohee 6y ago% cd ~ && ln -s /usr/bin/sudo sudoedit && ./sudoedit -s \\ sudoedit(75875,0x109abbdc0) malloc: Incorrect checksum for freed object 0x7fcf2fc06bf8: probably modified after being freed. Corrupt value: 0x737666635f343332 sudoedit(75875,0x109abbdc0) malloc: *** set a breakpoint in malloc_error_break to debug zsh: abort ./sudoedit -s \\ Doesn't bode well at all for it being non exploitable (due to ASLR sometimes it doesn't crash tho)
- jonnytran 6y agoWhat is the simplest way to upgrade on macOS?
- brohee 6y agoNo simple way because Apple is sitting on its ass.