News for hackers. Stuff that matters.

A comment on List of Unix binaries that can be used to bypass local security restrictions. Parent comment

Re:List of Unix binaries that can be used to bypass local se... by sigotirandolas on Friday July 07, 2023 @04:06PM (#36637609)
What really matters is not whether you have sudo (or su, pkexec, etc.) installed, but rather that you never, ever escalate privileges from a less trustworthy user to a more privileged one, since at a conceptual level this combines the low trustworthiness with the high privileged-ness.

Instead, when you want to elevate privileges, you should do so by using a mechanism that takes the control of the machine away from less trustworthy user - such as a Secure Attention Key or similar mechanism.

[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by chasil on Friday July 07, 2023 @04:45PM (#36638059)
But all of these programs escalate privileges from less trustworthy to more.

  $ ls -l /usr/bin/passwd
  -rwsr-xr-x. 1 root root 33424 Apr  1  2022 /usr/bin/passwd
The "s" above indicates that the program is allowed to call the setuid() family of functions to alter the real, effective, and/or saved user id.

You would not be able to change your password without the functionality.

[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by sigotirandolas on Saturday July 08, 2023 @05:39AM (#36642860)
Yeah, they do, but (in theory) they should either only allow you to do some very restricted commands (e.g. chsh, chpasswd), or require you to authenticate to run arbitrary commands (e.g. su, sudo).

The former are fine since they don’t allow arbitrary commands/escalation, and the latter (IMO) you should not use because it’s impossible to use them safely as you can’t trust the environment (the display server, terminal emulator, shell, etc.) to do what you say if it is compromised.

In practice, some of them will have bugs (and the kernel also has privilege escalation bugs frequently) so I don’t consider the user/root separation a particularly strong security boundary. For me it’s more of an additional layer against not very sophisticated attacks.

[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by chasil on Saturday July 08, 2023 @10:15AM (#36644638)
Yes, your position is more nuanced than I first surmised, not "never, ever."
[ Parent | on HN ]