News for hackers. Stuff that matters.

A comment on List of Unix binaries that can be used to bypass local security restrictions. Parent comment

Re:List of Unix binaries that can be used to bypass local se... by voxadam on Friday July 07, 2023 @06:52AM (#36629848)
Do you also disallow su on your system or is it just sudo that's been banished?

Edit: I'm curious because if you still allow su on the system there seems to be little to no reason to set PermitRootLogin in sshd_config regardless of auth mechanism (password, cert, token, etc.).

[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by fuzztester on Friday July 07, 2023 @07:27AM (#36630106)
Yes, good question.

Because su was there in Unix before sudo, IIRC. And sudo means "su do", meaning do (something) as su, which in turn meant "super user" or "substitute user" according to Wikipedia, since it can also be used to login as other users than root , e.g.:

su - tom

https://en.m.wikipedia.org/wiki/Su_(Unix)

[ Parent | on HN ]