News for hackers. Stuff that matters.

A comment on CVE-2019-14287: Sudo Bug Allows Restricted Users to Run Commands as Root. Parent comment

Re:CVE-2019-14287: Sudo Bug Allows Restricted Users to Run C... by cracauer on Tuesday October 15, 2019 @11:05AM (#21259195)
No question about the headlines overstating.

But I don't think this is a rare situation. For example you can allow a bunch of users to restart and change a buildbot infrastructure (which runs as its own user, not root).

[ Parent | on HN ]
Re:CVE-2019-14287: Sudo Bug Allows Restricted Users to Run C... by derekp7 on Tuesday October 15, 2019 @11:23AM (#21259404)
But you are giving them access to that specific build user, not "ALL" followed by "!root".
[ Parent | on HN ]