Re: Debian package manager privilege escalation attack

To: debian-devel@lists.debian.org
Subject: Re: Debian package manager privilege escalation attack
From: Andrey Rahmatullin <wrar@debian.org>
Date: Thu, 12 Aug 2021 11:19:13 +0500
Message-id: <[🔎] YRS9YQ8UZGE303+j@belkar.wrar.name>
In-reply-to: <[🔎] a91c91916c65e7504d7a035063e08f9f4effffce.camel@hashvault.io>
References: <[🔎] CAO6YxPyH5DKH8TB8o=EsE0CesqrqP_Uh1+5DiJOeJjaaY9bPng@mail.gmail.com> <[🔎] 31b54d97-15b4-7cc3-d083-1fe3a664ee91@thykier.net> <[🔎] a91c91916c65e7504d7a035063e08f9f4effffce.camel@hashvault.io>

On Thu, Aug 12, 2021 at 01:12:37AM -0500, Brian Thompson wrote:
> Would you agree that there is an issue with sudo access that is enabled
> by default on most Debian and Debian-based distributions? The bug may
> not be in apt, but it definitely lives somewhere.
Do you think "sudo access" itself is a "privilege escalation attack"?

-- 
WBR, wRAR

Attachment: signature.asc
Description: PGP signature

Reply to:

Follow-Ups:
- Re: Debian package manager privilege escalation attack
  - From: Brian Thompson <brian@hashvault.io>

References:
- Debian package manager privilege escalation attack
  - From: Timothy M Butterworth <timothy.m.butterworth@gmail.com>
- Re: Debian package manager privilege escalation attack
  - From: Niels Thykier <niels@thykier.net>
- Re: Debian package manager privilege escalation attack
  - From: Brian Thompson <brian@hashvault.io>

Prev by Date: Re: Debian package manager privilege escalation attack
Next by Date: Re: Debian package manager privilege escalation attack
Previous by thread: Re: Debian package manager privilege escalation attack
Next by thread: Re: Debian package manager privilege escalation attack
Index(es):
- Date
- Thread