Can we please stop talking about that sudo bug? It only affects systems using an insane configuration (allow $command as anyone *but* root). I can't come up with any situation where that configuration makes any sense (vs e.g. "allow $command as any member of a given group).
It only affects configurations that restrict access as root *but allow access as -1*, i.e. use ALL. The way you phrase it it sounds like it affects any config that allows access as a user or group that isn't root.
-
-
You also mention "arbitrary commands" while any config that allows "arbitrary commands" as ALL, !root is already almost certainly vulnerable per se and a terrible idea and nobody should be doing that.
-
This Tweet is unavailable.
- Show replies
New conversation -
-
-
Do you expect journalists to tell about ALL in the same line, expecting that everyone would immediately understand what we are taking about? If you carefully read the article, it has also been written for people who don't know what's Sudo, what's sudoers and ALL parameters.
-
This Tweet is unavailable.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.