undefined | Better HN

0 pointsaasasd6y ago0 comments

Where does sudo come in with suid executables? Especially since afaik sudo depends on suid in the first place.

0 comments

3 comments · 1 top-level

jlgaddis6y ago· 2 in thread

One might be granted privileges to mount the filesystem using sudo, but not privileges to run other commands.

If the filesystem just mounted has setuid executables, however, the user can then get around their lack of additional sudo privileges by running the setuid executables.

Although most people seem to use sudo to allow a user to run anything, that's really not how it was intended to be used.

aasasdOP6y ago

That's somewhat different from the Veracrypt case, afaict. And it doesn't seem like this is what bonzini meant by mentioning sudo.

bonzini6y ago

You still need to gain the privilege to mount filesystems in order to exploit the flaw. So it is a privilege escalation in that you can go from "sudo mount" to a root shell, but it is: 1) not exploitable unless you have sudo 2) pointless if you are authorized to "sudo" any command.

2 more replies

j / k navigate · click thread line to collapse