Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yeah, works well:

$ /usr/bin/sudo() { echo Not the real sudo.; }

$ /usr/bin/sudo

Not the real sudo.

And every other suggestion also doesn't work if the attacker can just replace the shell.



/usr/bin/sudo isn't evaluated as a function under ksh.


> And every other suggestion also doesn't work if the attacker can just replace the shell.


With what? rc? My only shells are sh, ksh and rc there.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: