Security problems with sudo

Thiago Macieira thiago at kde.org
Sun May 17 13:04:27 BST 2009


John Tapsell wrote:
>  Now the question is..  is there any way to protected against this?

No. If your environment is already infected, your using of sudo gives the 
privilege elevation.

If you want to protect against that, don't elevate privileges using sudo. 
Use ssh -Y.

-- 
  Thiago Macieira  -  thiago (AT) macieira.info - thiago (AT) kde.org
    PGP/GPG: 0x6EF45358; fingerprint:
    E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20090517/0cde203c/attachment.sig>


More information about the kde-core-devel mailing list