3 ms·

Maybe also make /usr/bin/sudo immutable? would that help prevent a package manager from messing with it? I think so.

• ec109685 2y ago
  How would you do that?
  • xomodo 2y ago
    man chattr
  • vrotaru 2y ago
    lsattr - for reading attributes chattr - for setting them You need the `i` attribute. But this is filesystem dependent. Anyway protecting the `sudo` binary from package managers is a so-so idea.
• kelnos 2y ago
  The downside of this is that if you have your system set up to automatically install package updates, then it will start failing, which might kill all automatic updates. On Debian, for example, I have unattended-upgrades set up to automatically install security updates. sudo is reasonably likely to have updates for security reasons.
  • dpifke 2y ago
    There are multiple ways to "override" a file managed by dpkg: https://wiki.debian.org/DebianAlternatives https://wiki.debian.org/DebianAlternatives https://www.debian.org/doc/debian-policy/ap-pkg-diversions.html https://www.debian.org/doc/debian-policy/ap-pkg-diversions.h...
• deleted 2y ago
  [deleted]