News for hackers. Stuff that matters.

A comment on Systemd v228 local root exploit. Parent comment

Re:Systemd v228 local root exploit by jhasse on Tuesday January 24, 2017 @10:17AM (#13471959)
What if the program reading /etc/sudoers{.d} has a bug and crashes?
[ Parent | on HN ]
Re:Systemd v228 local root exploit by jacobmischka on Tuesday January 24, 2017 @01:56PM (#13474332)
Exactly, like the link says, at least it runs without permissions and is sandboxed.
[ Parent | on HN ]
Re:Systemd v228 local root exploit by ioquatix on Wednesday January 25, 2017 @07:25AM (#13480815)
Then.. sudo has a bug and should be fixed?
[ Parent | on HN ]
Re:Systemd v228 local root exploit by jhasse on Wednesday January 25, 2017 @09:01AM (#13481388)
But the same can be said about your "authorisation code using JavaScript".
[ Parent | on HN ]
Re:Systemd v228 local root exploit by ioquatix on Wednesday January 25, 2017 @07:23PM (#13487561)
Yes, but one is written by a developer, and one is written by a user. That's a pretty big difference, IMHO.
[ Parent | on HN ]