A tricks on how to run a script as root without sudo, in case someone needs this. I use this for toggle on and off camera without pkexec. It’s useful imho

  • mvirts@lemmy.world
    link
    fedilink
    arrow-up
    26
    arrow-down
    1
    ·
    9 months ago

    How to break user mode protections in 1 quick misstep!

    Just like when an admin hands out sudo rights to run a custom script without locking down the script itself.

  • Papamousse@beehaw.org
    link
    fedilink
    arrow-up
    12
    ·
    9 months ago

    Oh, in the 90s I worked at a big defense contractor, one of a shell script had a suid on it, so just by creating a symbolic link named “-x” pointing to the script, and executing it, you entered in a root shell ☺️

  • nyan@lemmy.cafe
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    9 months ago

    How to run a shell script with root permisions without sudo? su to root. Or set up the correct permissions for the script and whatever it needs to touch, and add your user to any required groups, so that you don’t need to be root to run the script. Rolling your own solution is never a good idea for anything security-related.

    • vector_zero@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      9 months ago

      Or create a service running with limited access to specific resources, and create an API for users to make requests to that service.

  • rotopenguin@infosec.pub
    link
    fedilink
    English
    arrow-up
    2
    ·
    9 months ago

    Do you know how many times I’ve made some little bit of shell code “setuid” by writing a shitty little C program that just calls system()?