3 ms·

Yeah, works well: $ /usr/bin/sudo() { echo Not the real sudo.; } $ /usr/bin/sudo Not the real sudo. And every other suggestion also doesn't work if the atta

Yeah, works well: $ /usr/bin/sudo() { echo Not the real sudo.; } $ /usr/bin/sudo Not the real sudo. And every other suggestion also doesn't work if the attacker can just replace the shell.

deleted 5mo ago
[deleted]
anthk 5mo ago
/usr/bin/sudo isn't evaluated as a function under ksh.
- nightpool 5mo ago
  > And every other suggestion also doesn't work if the attacker can just replace the shell.
  - anthk 5mo ago
    With what? rc? My only shells are sh, ksh and rc there.