| UNIX Privilege Escalation Without Exploitation
What is sudo(1)?

sudo(1) is a program that allows the execution of commands as another UNIX user

  • Also has the same problem as su(1) and newrole(1) but this can be arbitrated with the sudoers(5) policy file
  • sudo(1) has other problems
    • One can execute commands through vi(1), more(1), less(1), etc.
    • One can override shell variables to control execution