4 ms·

most of the shell exploits are prevented by including NOEXEC: in the sudo permissions. IDK why this is not the default. This prevents the sudoed command from r

by quench 3y ago

most of the shell exploits are prevented by including NOEXEC: in the sudo permissions. IDK why this is not the default. This prevents the sudoed command from running any other commands

themerone 3y ago
This would break most package managers and many other system tools.
PeterisP 3y ago
For me, I quite often use sudo to run scripts that install or reconfigure something, and they obviously do need to execute other commands.