Hacker News (curated)new | past | comments | ask | show | jobs| show hidden

It’s not, but the grandparent does point out 1 major flaw with sudo being a typically command that goes through normal path discovery. It makes it easier to escalate from a compromised user account to a compromised root account, since the end user is likely to type the root password into a command that can be shadowed in their user space.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact | github