Next month I'll talk in the @allthingsopen #security track in Raleigh, NC about #sudo:
https://2023.allthingsopen.org/security-track-overview/
I'll talk about the latest @sudoproject features, like #JSON formatted logging, controlling access even more and logging even more events.
My favorite #infosec conference, @passthesaltcon just posted their annual report:
https://2023.pass-the-salt.org/annual-report/
They have less visitors than speakers at some larger events, like #RSA Conference, but had more impact on #sudo and syslog-ng development, than any other event.
Autoconfigure PCIe UART Card at boot - Ubuntu 22.04 #boot #sudo #serialport #dosbox
#boot #sudo #serialport #dosbox
sudoers.d file not working for a non-sudo user using three commands without password #commandline #permissions #sudo #password
#commandline #permissions #sudo #password
Where can I add to the ***universal*** path? #commandline #bash #sudo #paths
#commandline #bash #sudo #paths
Btw, I think #PAM is an underrated piece of tech. It's pluggable, so you can implement whatever authentication strategy you want. Fingerprint check? Face recognition? You tell me.
But not only this. It can be used beyond login managers. There was one time when I played with alternative authentication for #sudo program. In my case, I wanted to tap on my #YubiKey instead of using password. It proved inconvenient, so I rolled things back, but it's fascinating how easy it was to configure this.
Can someone explain an attack where aborting entering a password on #Linux is an attack vector?
I have this in #sudo all the time, but I assume it is the authentication system doing it.
When I hit Ctrl+c it sleeps for a long time, and if I do it several times in a row, my account is locked out.
In what plausible scenario can an attacker benefit from being able to start + cancel an authentication many times?
How to fix repository error? #apt #sudo #updatemanager #repository
#apt #sudo #updatemanager #repository
How to make the current working directory be highlighted in color? #commandline #2004 #permissions #sudo
#commandline #permissions #sudo
I need help setting my password in a distrobox container #commandline #sudo #tools
i install my pc ubuntu 22.04 and sudo apt update isnot properly done #apt #updates #sudo #repository #softwaresources
#apt #Updates #sudo #repository #softwaresources
i use Debian i need solutions any problems #apt #packagemanagement #updates #sudo #debian
#apt #packagemanagement #Updates #sudo #debian
Und gleich noch eine Frage: von Paperless-ngx ist ein kleines Update erschienen - das muss ich manuell einspielen auf dem Raspberry Pi - wie gehe ich da vor, damit nichts von den Einstellungen gelöscht wird?
sudo apt update/upgrade bzw. sudo apt-get scheint nicht zu genügen
Danke!
#sudo #linux #raspberrypi #paperless #paperlessngx
Interesting sudo(8) versus doas(1) case.
While I always prefer doas(1) over sudo(8) there is at least one case where doas(1) is useless.
Allow group member to just install packages and not remove them.
Details in the FEATURE REQUEST here:
"unrecognized option [try_fisrt_pass]" when a command with sudo #commandline #sudo #pam