2 ms·
ssh root@localhost suid bit is considered harmful
by vbezhenar 3y ago
ssh root@localhost
suid bit is considered harmful
- pxeger1 3y agoWhy considered harmful? Connecting to a daemon running as root still relies on the security of the daemon.
- vbezhenar 3y agoBecause it's security escape hatch. It's not needed. Suid programs caused many vulnerabilities. There must not be a way to get more privileges, only less.
- kazinator 3y agoYou can do that if you had the forethought to edit your /etc/securetty file before nuking su, to allow root logins on the ptys used by sshd. If not, logging in on a physical console would work or rebooting to single either mode or whatever.