Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #231261

Re: Sudo ... use or delete?

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Fri, Jan 29, 2021 at 08:12:20AM -0700, Antonio Russo wrote:

[...]

> But, more specifically to your question about sudo, let me argue that, at the
> level of paranoia required to be worried about sudo, you should also be
> worried about a LOT of other packages [...]

I do appreciate and use sudo -- for me it reduces embarrasing
fat-finger mistakes significantly.

But it's not everyone cup of tea, and to be fair, there's one
current privilege escalation vulnerability [1] around. It seems
easily fixable (Debian has a fixed version out, if you do use
sudo, check with [2]).

So if you aren't using <foo>, it's wise to not install <foo>.
Complexity kills :-)

Cheers

[1] https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit
[2] https://security-tracker.debian.org/tracker/CVE-2021-3156
 - t

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Sudo ... use or delete? Peter Ehlert <peter@sdi-baja.com> - 2021-01-29 16:00 +0100
  Re: Sudo ... use or delete? Greg Wooledge <wooledg@eeg.ccf.org> - 2021-01-29 16:00 +0100
  Re: Sudo ... use or delete? Antonio Russo <aerusso@aerusso.net> - 2021-01-29 16:20 +0100
    Re: Sudo ... use or delete? <tomas@tuxteam.de> - 2021-01-29 16:50 +0100
      Re: Sudo ... use or delete? Eike Lantzsch <zp6cge@gmx.net> - 2021-01-29 18:40 +0100
        Re: Sudo ... use or delete? Roberto C. Sánchez <roberto@debian.org> - 2021-01-29 19:30 +0100
          Re: Sudo ... use or delete? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-29 20:50 +0100
  Re: Sudo ... use or delete? Teemu Likonen <tlikonen@iki.fi> - 2021-01-29 17:00 +0100
    Re: Sudo ... use or delete? john doe <johndoe65534@mail.com> - 2021-01-29 17:00 +0100
      Re: Sudo ... use or delete? Antonio Russo <aerusso@aerusso.net> - 2021-01-29 17:00 +0100
        Re: Sudo ... use or delete? john doe <johndoe65534@mail.com> - 2021-01-29 17:30 +0100
    Re: Sudo ... use or delete? Peter Ehlert <peter@sdi-baja.com> - 2021-01-29 18:10 +0100
  Re: Sudo ... use or delete? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-29 20:50 +0100
    Re: Sudo ... use or delete? Peter Ehlert <peter@sdi-baja.com> - 2021-01-30 14:30 +0100

csiph-web