2 ms·
I changed the sudo settings to not require a password. Now an application on my computer can obtain root without user interaction. Where is my CVE?
by J-Kuhn 2mo ago
I changed the sudo settings to not require a password.
Now an application on my computer can obtain root without user interaction.
Where is my CVE?
- inigyou 2mo agoSame. There are so many things you could mess up without root from my account anyway. My account isn't a locked down one. You could alias sudo to a keylogger, for instance, and then do whatever as root the next time I sudo something. So the password check really has no point. Typing sudo is still a lightweight sanity check, otherwise I may as well just log in as root.