PDA

View Full Version : Something interesting (no password root)



Matthias4444
November 23rd, 2005, 01:42 AM
I accidentally found a rather large security hole. If you type in "sudo su root" you will have root privlages without entering a password, this needs to be fixed I believe. Also if you type "sudo sudo (command)" you can execute commands that usually require a password without needing one.

narcolept
November 23rd, 2005, 01:48 AM
This is only if you have previously sudo'd within x amount of time, kind of like how you don't have to type your password after the first time if you run a sudo command and then one immediately after. not sure what the default time is though, maybe someone else could shed some light on that.

Matthias4444
November 23rd, 2005, 01:50 AM
ah thats good, i just tried it by closing the terminal and then reopening. I'm glad that its not that big of a deal.

ubuntu27
November 23rd, 2005, 02:02 AM
This is only if you have previously sudo'd within x amount of time, kind of like how you don't have to type your password after the first time if you run a sudo command and then one immediately after. not sure what the default time is though, maybe someone else could shed some light on that.

I heard that it's 6 min.