3 ms·
A simple LD_PRELOAD command can cause your shell to run "rm -rf /" when you type "/sudo". If your unprivileged user is compromised, you are pretty hosed.
by lrvick 5mo ago
A simple LD_PRELOAD command can cause your shell to run "rm -rf /" when you type "/sudo".
If your unprivileged user is compromised, you are pretty hosed.
- anthk 5mo agoIt should be a way to make system env vars (profile.d or simlar) as readonly so every users' shell had these set to empty values and unable to change them.
- deleted 5mo ago[deleted]
- marshray 5mo agoShell-only, but https://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3_chap02.html#readonly https://pubs.opengroup.org/onlinepubs/9699919799/utilities/V...
- anthk 5mo agoYes; I'm aware, but for some environments writting a custom shell as the one for SDF would be an easier task. Or maybe a really restricted "ash" called "rash" -because it is- with maybe autocomplete and that's it. Hardcoded $PATH and the like.