News for hackers. Stuff that matters.

A comment on GitLab Database Incident – Live Report. Parent comment

Re:GitLab Database Incident – Live Report by foobiekr on Tuesday January 31, 2017 @10:46PM (#13538050)
I am actually curious what user they were logged in as and what permissions were in effect.

Unfortunately, the answer most places is that the diagnostic account (as opposed to the corrective action account) is fully privileged (or worse, root).

[ Parent | on HN ]
Re:GitLab Database Incident – Live Report by kelnos on Wednesday February 01, 2017 @12:15AM (#13538468)
From a comment in the doc ("YP says it’s best for him not to run anything with sudo any more today, handing off the restoring to JN"), I assume they're running as a regular user, sudo'ing as necessary.
[ Parent | on HN ]
Re:GitLab Database Incident – Live Report by YorickPeterse on Wednesday February 01, 2017 @06:34AM (#13539898)
A regular user that can use `sudo`.
[ Parent | on HN ]