News for hackers. Stuff that matters.
Re:Linux workstation security checklist by hnnh on Friday August 28, 2015 @05:10AM (#10134402)
>Trick the user into running a program that does 'alias sudo=evil-sudo' >> ~/.bashrc

That's only going to get you the user's password, not the root password.

Re:Linux workstation security checklist by ivank on Friday August 28, 2015 @05:15AM (#10134420)
Good point. I've toned down my comment because that root password would be getting typed in less often.

An attacker might still bring an evil-su in addition to an evil-sudo, though. And even if you're logging into that root user only in an another tty, it seems like an unnecessary risk to share the password with LUKS.

Re:Linux workstation security checklist by mricon on Friday August 28, 2015 @08:39AM (#10135017)
You actually tend to never use the root password on a modern workstation -- just sudo. The situations where you have to use a root password are usually if something has gone wrong and you have to log in via tty.