Re:Why GNU/Linux Viruses Are Fairly Uncommon
by pvorb on Monday August 12, 2019 @07:17PM
(#20681154)
You could even replace every command I run with a malware version simply by altering the $PATH in ~/.bashrc. If you manage to replace, say, apt-get with a malware version, you'll get admin permissions every time I run `sudo apt-get ...`.
[ Parent
| on HN ]
Re:Why GNU/Linux Viruses Are Fairly Uncommon
by wang_li on Monday August 12, 2019 @08:32PM
(#20681635)
If your sudo is configured correctly it will have an administrator defined PATH. However if you have sudo price to run apt-get, anything that could manipulate your rc files can just run sudo apt-get on its own. No need to trick you.
Re:Why GNU/Linux Viruses Are Fairly Uncommon
by Godel_unicode on Monday August 12, 2019 @11:09PM
(#20682466)
Unless it doesn't have your password, and sudo is configured to require auth to elevate. This is the STIG requirement for this exact reason
Edit: of course, it could just manipulate the path to include it's own evil sudo wrapper, but the chess match always sounds like this.