2 ms·
> Bypassing ssh auth means getting a root shell Only if you're allowed to login as root, which is definitely not the case everywhere.
by armitron 3y ago
> Bypassing ssh auth means getting a root shell
Only if you're allowed to login as root, which is definitely not the case everywhere.
- colinsane 3y agonot only that, but logins show up in logs.
- juliusdavies 3y agoMy sense was this backdoor gets to execute whatever it wants using whatever "user" sshd is running as. So even if root logins are disabled, this backdoor doesn't care.
- wepple 3y agoPlus, detection is likely to be be very different.