Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #198430

Re: As seen above: use of su vs sudo

Path csiph.com!feeder.erje.net!1.eu.feeder.erje.net!news2.arglkargh.de!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod
From Michael Stone <mstone@debian.org>
Newsgroups linux.debian.user
Subject Re: As seen above: use of su vs sudo
Date Tue, 07 Aug 2018 20:50:02 +0200
Message-ID <wkfdo-4eo-31@gated-at.bofh.it> (permalink)
References <wk8EW-5t-17@gated-at.bofh.it> <wk8Yh-se-11@gated-at.bofh.it> <wk9hE-zx-9@gated-at.bofh.it> <wk9KF-JR-7@gated-at.bofh.it> <wk9Ul-13f-1@gated-at.bofh.it> <wkadH-1ac-3@gated-at.bofh.it> <wkano-1dB-1@gated-at.bofh.it> <wkcSd-2RJ-3@gated-at.bofh.it> <wkdEC-3p7-7@gated-at.bofh.it> <wkeAG-403-9@gated-at.bofh.it>
X-Mailbox-Line From debian-user-request@lists.debian.org Tue Aug 7 18:43:26 2018
Old-Return-Path <mstone@debian.org>
X-Amavis-Spam-Status No, score=-5.439 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, FOURLA=0.1, LDO_WHITELIST=-5, SUBJ_AS_SEEN=1.461] autolearn=no autolearn_force=no
X-Policyd-Weight using cached result; rate: -5
Mail-Followup-To debian-user@lists.debian.org
MIME-Version 1.0
Content-Type text/plain; charset=us-ascii; format=flowed
Content-Disposition inline
X-PGP-Fingerprint 02D5 315F F11F 1861 860E 1E02 F61A ACDC FA11 FFDE
User-Agent NeoMutt/20170113 (1.7.2)
X-Mailing-List <debian-user@lists.debian.org> archive/latest/738320
List-ID <debian-user.lists.debian.org>
List-URL <https://lists.debian.org/debian-user/>
List-Archive https://lists.debian.org/msgid-search/085a40a8-9a71-11e8-9b6a-00163eeb5320@msgid.mathom.us
Approved robomod@news.nic.it
Lines 15
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Tue, 7 Aug 2018 14:43:06 -0400
X-Original-Message-ID <085a40a8-9a71-11e8-9b6a-00163eeb5320@msgid.mathom.us>
X-Original-References <722f650b-7cad-df7e-884a-d3cb994d6f03@online.de> <5B698B9C.1030902@fastmail.fm> <883ba059-4114-f2c7-3240-7f29ea497a63@online.de> <5B699579.9000805@fastmail.fm> <20180807130907.GA4027554@phare.normalesup.org> <5B699DBA.9060309@fastmail.fm> <20180807133143.GA4036167@phare.normalesup.org> <20180807161426.GC8348@alum> <ca218146-9a63-11e8-9b6a-00163eeb5320@msgid.mathom.us> <slrnpmjnnr.23n.curty@einstein.electron.org>
Xref csiph.com linux.debian.user:198430

Show key headers only | View raw

On Tue, Aug 07, 2018 at 06:01:27PM +0000, Curt wrote:
>I thought his point might be that in typing the full path at least you
>know you're getting '/bin/su' and not some other 'su' that a malevolent
>individual might have created in your home directory after prepending HOME
>to your path, for example (in that malevolent person's effort to elevate
>himself to superuser status).

Yes, it's just a completely useless thing to do for most plausible 
attack scenarios. Typing unnecessary characters to possibly protect 
yourself from one extremely specific (and frankly unlikely) attack seems 
more superstition than science; in a couple of decades of looking at 
compromised computers, I can't recall ever running across an attack in 
the wild that depended on someone typing "su" and not "/bin/su".

Mike Stone

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

As seen above: use of su vs sudo Martin Drescher <keine-eile@online.de> - 2018-08-07 12:00 +0200
  Re: As seen above: use of su vs sudo Joe <joe@jretrading.com> - 2018-08-07 12:50 +0200
    Re: As seen above: use of su vs sudo Jonathan Dowland <jmtd@debian.org> - 2018-08-07 13:20 +0200
      Re: As seen above: use of su vs sudo Martin Drescher <keine-eile@online.de> - 2018-08-07 13:30 +0200
        Re: As seen above: use of su vs sudo David Wright <deblis@lionunicorn.co.uk> - 2018-08-07 17:20 +0200
          Re: As seen above: use of su vs sudo Martin <keine-eile@online.de> - 2018-08-07 17:40 +0200
            Re: As seen above: use of su vs sudo Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2018-08-07 18:20 +0200
      Re: As seen above: use of su vs sudo Joe <joe@jretrading.com> - 2018-08-07 14:10 +0200
        Re: As seen above: use of su vs sudo likcoras <likcoras@riseup.net> - 2018-08-07 14:40 +0200
    Re: As seen above: use of su vs sudo likcoras <likcoras@riseup.net> - 2018-08-07 14:00 +0200
  Re: As seen above: use of su vs sudo Richard Owlett <rowlett@cloud85.net> - 2018-08-07 13:00 +0200
  Re: As seen above: use of su vs sudo Stephan Seitz <stse+debian@fsing.rootsland.net> - 2018-08-07 13:20 +0200
    Re: As seen above: use of su vs sudo James Allsopp <jamesaallsopp@googlemail.com> - 2018-08-07 13:30 +0200
      Re: As seen above: use of su vs sudo Curt <curty@free.fr> - 2018-08-07 13:50 +0200
        Re: As seen above: use of su vs sudo Stephan Seitz <stse+debian@fsing.rootsland.net> - 2018-08-07 14:30 +0200
          Re: As seen above: use of su vs sudo Martin <keine-eile@online.de> - 2018-08-07 14:30 +0200
        Re: As seen above: use of su vs sudo Jonathan Dowland <jmtd@debian.org> - 2018-08-07 15:20 +0200
          Re: As seen above: use of su vs sudo Martin <keine-eile@online.de> - 2018-08-07 15:50 +0200
      Re: As seen above: use of su vs sudo <tomas@tuxteam.de> - 2018-08-07 14:20 +0200
      Re: As seen above: use of su vs sudo Dave Sherohman <dave@sherohman.org> - 2018-08-07 15:30 +0200
    Re: As seen above: use of su vs sudo Martin <keine-eile@online.de> - 2018-08-07 13:40 +0200
      Re: As seen above: use of su vs sudo Stephan Seitz <stse+debian@fsing.rootsland.net> - 2018-08-07 14:30 +0200
  Re: As seen above: use of su vs sudo The Wanderer <wanderer@fastmail.fm> - 2018-08-07 13:30 +0200
    Re: As seen above: use of su vs sudo Martin <keine-eile@online.de> - 2018-08-07 13:50 +0200
      Re: As seen above: use of su vs sudo The Wanderer <wanderer@fastmail.fm> - 2018-08-07 14:10 +0200
        Re: As seen above: use of su vs sudo Martin <keine-eile@online.de> - 2018-08-07 14:30 +0200
          Re: As seen above: use of su vs sudo The Wanderer <wanderer@fastmail.fm> - 2018-08-07 15:00 +0200
            Re: As seen above: use of su vs sudo Nicolas George <george@nsup.org> - 2018-08-07 15:10 +0200
              Re: As seen above: use of su vs sudo The Wanderer <wanderer@fastmail.fm> - 2018-08-07 15:30 +0200
                Re: As seen above: use of su vs sudo Nicolas George <george@nsup.org> - 2018-08-07 15:40 +0200
                Re: As seen above: use of su vs sudo David Wright <deblis@lionunicorn.co.uk> - 2018-08-07 18:20 +0200
                Re: As seen above: use of su vs sudo Nicolas George <george@nsup.org> - 2018-08-07 18:40 +0200
                Re: As seen above: use of su vs sudo Greg Wooledge <wooledg@eeg.ccf.org> - 2018-08-07 18:50 +0200
                Re: As seen above: use of su vs sudo Michael Stone <mstone@debian.org> - 2018-08-07 19:10 +0200
                Re: As seen above: use of su vs sudo Curt <curty@free.fr> - 2018-08-07 20:10 +0200
                Re: As seen above: use of su vs sudo Nicolas George <george@nsup.org> - 2018-08-07 20:10 +0200
                Re: As seen above: use of su vs sudo Curt <curty@free.fr> - 2018-08-07 20:20 +0200
                Re: As seen above: use of su vs sudo Michael Stone <mstone@debian.org> - 2018-08-07 20:50 +0200
            Re: As seen above: use of su vs sudo Martin <keine-eile@online.de> - 2018-08-07 15:10 +0200
              Re: As seen above: use of su vs sudo The Wanderer <wanderer@fastmail.fm> - 2018-08-07 15:30 +0200
                Re: As seen above: use of su vs sudo Michael Stone <mstone@debian.org> - 2018-08-07 15:50 +0200
                Re: As seen above: use of su vs sudo Martin <keine-eile@online.de> - 2018-08-07 15:50 +0200
            Re: As seen above: use of su vs sudo Nemeth Gyorgy <friczy@freemail.hu> - 2018-08-07 21:10 +0200
              Re: As seen above: use of su vs sudo Gene Heskett <gheskett@shentel.net> - 2018-08-07 22:10 +0200
          Re: As seen above: use of su vs sudo Michael Stone <mstone@debian.org> - 2018-08-07 15:20 +0200
          Re: As seen above: use of su vs sudo Stephan Seitz <stse+debian@fsing.rootsland.net> - 2018-08-07 16:10 +0200
        Re: As seen above: use of su vs sudo Dave Sherohman <dave@sherohman.org> - 2018-08-07 15:30 +0200
          Re: As seen above: use of su vs sudo The Wanderer <wanderer@fastmail.fm> - 2018-08-07 15:40 +0200
        Re: As seen above: use of su vs sudo David Wright <deblis@lionunicorn.co.uk> - 2018-08-07 18:10 +0200
  Re: As seen above: use of su vs sudo Eike Lantzsch <zp6cge@gmx.net> - 2018-08-07 14:30 +0200
  Re: As seen above: use of su vs sudo mick crane <mick.crane@gmail.com> - 2018-08-07 16:00 +0200
  Re: As seen above: use of su vs sudo mick crane <mick.crane@gmail.com> - 2018-08-07 18:30 +0200

csiph-web