4 ms·
Logging the ssh key used sounds interesting - not something I've tried before. I think you're doing something wrong with sudo. I'm not talking about "reenterin
by lotsofcows 14y ago
Logging the ssh key used sounds interesting - not something I've tried before.
I think you're doing something wrong with sudo. I'm not talking about "reentering your password" in the Ubuntu or Mac sense. I'm talking about giving access to specific limited commands.
And what distro are you running where local privilege escalation is common?
- moe 14y agoI'm talking about giving access to specific limited commands. By definition the set is either so limited as to be essentially useless, or it opens (usually multiple) straightforward paths to a root-shell. Pretty much all sudoers-files I have seen fall in the latter category ("but he can only write the apache config-file!"). And what distro are you running where local privilege escalation is common? https://www.google.com/search?q=linux+local+privilege+escalation https://www.google.com/search?q=linux+local+privilege+escala...
- lotsofcows 14y ago"only write the apache config-file" Ha! Local privilege: yeah, that's a lot but over a long time span and none should be current on decently maintained box. I've never even seen anyone attempt a 0 day on my boxen.