Heap-based buffer overflow in Sudo

Re:Heap-based buffer overflow in Sudo by moistbar on Wednesday January 27, 2021 @02:45PM (#25932954)

sudo doesn't have to grant full root access to everyone in the group. It can be set up such that certain users only have the ability to run specified commands as root, which is handy for orgs where you might have a group of tier 1 techs that you want to be able to run certain scripts (written by tier 2 or 3, of course) that require root, but you don't trust the engineers enough to have root access to everything.

[ Parent | on HN ]

Re:Heap-based buffer overflow in Sudo by 65a on Wednesday January 27, 2021 @09:32PM (#25937373)

It is almost always the case that a sufficiently malicious user can find a way to turn that into full blown root access.

[ Parent | on HN ]

Re:Heap-based buffer overflow in Sudo by moistbar on Sunday January 31, 2021 @07:54AM (#25978441)

So that means they should get full blown root from the beginning?

[ Parent | on HN ]

Re:Heap-based buffer overflow in Sudo by Spivak on Tuesday February 09, 2021 @10:58AM (#26078987)

IMHO yes because then you treat the access with the gravity that is required.

[ Parent | on HN ]