PDA

View Full Version : Something interesting (no password root)


Matthias4444
November 22nd, 2005, 08:42 PM
I accidentally found a rather large security hole. If you type in "sudo su root" you will have root privlages without entering a password, this needs to be fixed I believe. Also if you type "sudo sudo (command)" you can execute commands that usually require a password without needing one.

narcolept
November 22nd, 2005, 08:48 PM
This is only if you have previously sudo'd within x amount of time, kind of like how you don't have to type your password after the first time if you run a sudo command and then one immediately after. not sure what the default time is though, maybe someone else could shed some light on that.

Matthias4444
November 22nd, 2005, 08:50 PM
ah thats good, i just tried it by closing the terminal and then reopening. I'm glad that its not that big of a deal.

ubuntu27
November 22nd, 2005, 09:02 PM
This is only if you have previously sudo'd within x amount of time, kind of like how you don't have to type your password after the first time if you run a sudo command and then one immediately after. not sure what the default time is though, maybe someone else could shed some light on that.

I heard that it's 6 min.