Request: Easy way to "elevate" programs

Discussion in 'Pyra OS (Debian GNU/Linux)' started by thatgui, Oct 29, 2014.

  1. dimag0g

    dimag0g Very Active Member

    Joined:
    Jan 12, 2011
    Messages:
    608
    Location:
    Strasbourg, France
    Excuse me, but what would be the purpose of such script, exactly? If you're granting full access automatically on request, you get as much security as someone using "user ALL = NOPASSWD : ALL" config line.
     
  2. WizardStan

    WizardStan Mega GP Mania

    Joined:
    May 24, 2008
    Messages:
    16,713
    Because "user ALL = NOPASSWD : ALL" grants full access to everything whereas an automated script can be made to only grant access to a whitelist.From thatgui's original description, it sounded like he wanted something that he could add "trusted" PNDs to and upon inserting the SD card they would automatically be given privileges so he wouldn't have to keep entering his password every time he wanted to run them. This was before he knew that PNDs are always mounted to the same location, however, and can easily be added to the sudoers file from their /mnt/utmp directory.

    But regardless, it's irrelevant, whether it is useful or not says absolutely nothing about whether such an automated process is more or less secure than manually updating the sudoers file.

    As has already been explained, the PND system is inherently insecure by design, anything can come along and replace the binary in the appdata directory and reap the benefits of the elevated privileges. This is especially true if you are using a FAT32 card. As soon as you type "sudo" you're taking a risk, your security is only as good as the file system protecting the file that you're running.
     
  3. thatgui

    thatgui Advanced Member

    Joined:
    Apr 2, 2009
    Messages:
    2,901
    Sorry, my bad, thought this was aimed in another direction (discussion wise).
     
  4. Silent-Hunter

    Silent-Hunter Hardcore Member

    Joined:
    May 29, 2010
    Messages:
    3,053
    I don't see why it wouldn't, that's still x86 isn't it? It'd just be slow as #$%&!
     
  5. TrashyMG

    TrashyMG Sarcasm Dispenser Staff Member

    Joined:
    Jan 18, 2010
    Messages:
    10,558
    Not any off the shelf Linux distribution, as linux itself was initially released requiring a 386 and you can still find some distributions compiled to i386 still.. Also most 8086/8088 machines only had a maximum of 640KBs of system ram which is very limiting.. However there has one project that has done just that: http://elks.sourceforge.net/FAQ-English.html
     
    Last edited by a moderator: Nov 28, 2014

Share This Page

Loading...