Questions tagged [root]
The root tag has no usage guidance.
66
questions
0
votes
1answer
48 views
Can I use root account if every server only runs one service [Debian/Ubuntu Server] [duplicate]
Usually people say directly using root account is a very bad idea. However, my current setting is like this: to achieve a higher level of isolation, all services have their own virtual machine ...
0
votes
0answers
12 views
how to create a user specifically for opening veracrypt [migrated]
According to recent sudo issues, I want to remove its package from my machine and use root instead (for just related stuff - not all the time - like update and ...). But I have an issue that launching ...
1
vote
2answers
89 views
Secure boot for devices which don't have hardware security element
I understand that Root of Trust is necessary for implementing a secure boot on a device. Root of Trust is strong and trust worthy if this comes from hardware security elements like HSM/TPM/..
So for ...
1
vote
0answers
32 views
School wants me to install a root certificate to connect to their network on my personal laptop [duplicate]
What would this do? I'm a bit of a beginner to root certificates so stay with me here, I Don't want it to be able to see what I'm doing at home.
1
vote
2answers
81 views
What is the added security of “PermitRootLogin no” alone?
Referring to this Q&A:
The setting PermitRootLogin no alone does not prevent su - after logging in as a normal user.
As described in the referenced answer, there it is possible to prevent su with ...
1
vote
3answers
215 views
Why is it not recommended to permanently use the root account for all tasks?
Yes, I did read this answer: https://apple.stackexchange.com/questions/192365/is-it-ok-to-use-the-root-user-as-a-normal-user/192422#192422
But I still fail to understand the reasoning behind this ...
2
votes
1answer
44 views
Possible to inject in the middle of a ROOT NOPASSWD command with a wild card?
I'm testing for privilege escalations on a Ubuntu 18.04 host, and after running sudo -l , I've discovered a couple of root NOPASSWD commands for a standard user (w/unknown password). These commands ...
0
votes
1answer
30 views
Should root certificates have OCSP or CRL for it? [duplicate]
Should root certificates have OCSP or CRL for its own revocation status?
So here is what I mean:
Intermediate Cert -> http://example.com/root.crl
SAN Cert -> https://example.com/intermediate.crl
...
0
votes
0answers
25 views
How should an application verify a servers certificate? [duplicate]
Im developing an application and i want this application to connect to my server via ssl (using openssl currently). I want this application to verify my servers certificate. The problem is i dont ...
0
votes
1answer
123 views
offline root CA workflow
I have reviewed several discussions here regarding offline root CA management. While useful, none quite capture my question.
Firstly it presumably would not be generally assessed as an 'offline' root ...
0
votes
0answers
29 views
Running non-root process in docker vs bare metal
Recently I faced argument that threw me a bit off balance. I've been suggested that running application bare metal is actually more secure than running it in container.
Reasoning behind that is that ...
2
votes
2answers
524 views
How do I gain root access to a system using a setuid root binary?
Assuming that I have no ability to use sudo and rather limited permissions, but I have a shell script exploit that allows to me change the file ownership of a file to the current user by running a ...
1
vote
0answers
127 views
SECURITY VIOLATION: Root login attempted - Which password is affected?
Logwatch shows that proftpd was tried to be logged into using root
0.0.0.0 (111.254.68.221[111.254.68.221]) - SECURITY VIOLATION: Root login attempted
I found:
Normally, proftpd does not allow root ...
2
votes
0answers
489 views
What are the security risks of running QEMU/KVM as root?
Context: I own a machine; I trust root and all the accounts. I virtualize untrusted guests using KVM, and don't want them to escape.
When /dev/kvm has the right permissions, non-root users can run KVM ...
0
votes
2answers
181 views
How do I access a website on my phone without it being able to determine that it was accessed from the same phone and location?
How is it possible to create an account in a website with completely different credentials without the website being able to link the user of the first account and this new one?
Tor is not a viable ...
0
votes
0answers
46 views
SOC2 and the CentOS root user
One of our customers has the following requirement: according to SOC2 they need to block access to the CentOS root account.
They mean any access, even with su root or sudo su.
We have blocked the SSH ...
1
vote
0answers
194 views
Can an SSL certificate be signed by two issuers at the same time? [duplicate]
Can an SSL certificate be signed by two issuers at the same time?
Let's take an intermediate certificate as an example.
It is usually signed by a root. A root certificate is often self-signed.
In my ...
0
votes
2answers
178 views
Does sudo ever de-escalate privilege while the program/command/service is running?
For Example
Is it safer to do:
$ sudo [cmd] [args] [enter user password]
or
$ su - [enter root password]
# [cmd] [args]
I always assumed they are the exact same thing, because sudo utilizes ...
1
vote
1answer
147 views
Can not setting password for root when installing linux be exploited?
Recently I've been thinking about how I installed my linux system (I went for debian). When I installed it, I chose not to enter password for root and only entered password for my user account. My ...
-1
votes
1answer
42 views
MAC OS full admin rights and software removal in a corp environment
We have MAC OS for our developers (running with root). We also deploy an DLP endpoint agent. Now what happens, in some cases they just sudo and uninstall the agent because it slows down the machine. ...
1
vote
1answer
698 views
Self Signed Certificate in Certificate of Chain [closed]
I setup an internal Root CA with another Intermediate CA, which will issue and sign the certificates for other internal servers.
When I did the "openssl s_client -connect :443"
it shows the error ...
0
votes
0answers
65 views
Sufficient to only require 2FA for su elevation?
I have a small web-facing server on my home network. It is headless, and the only way to log in is to ssh with pubkey authentication from within the local network.
I wanted to turn on a 2FA ...
2
votes
3answers
198 views
Do I need to worry about vulnerabilities that require administrative privileges to exploit?
I am currently evaluating the impact that the recent NUC Firmware Advisory has on our machines.
What confuses me is that fact that those vulerabilities are scored with
a high risk score, but
require(...
0
votes
0answers
76 views
Government Root CA installed on computer/browser and Man-In-The-Middle [duplicate]
Some countries already have their government Root CA installed on computer/browsers. Is it possible for these countries to read Google etc. mails by using Man-In-The-Middle or similar technique(s)?
33
votes
2answers
5k views
Ability To Change Root User Password (Vulnerability?)
I am studying for my RHCSA exam, and one of the topics is the ability to "change a forgotten root user password." This is an official exam objective and even has official Redhat documentation.
How ...
5
votes
1answer
142 views
How can a bad process obtain root by waiting for a user to run a command as sudo?
A comment on this answer states:
The whole linux desktop provides very little protection against bad processes running as the user. A bad process could just watch the keyboard input and wait for ...
0
votes
1answer
90 views
Employer Self Signed Root Certificate
I don't have knowledge into programming/cybersecurity so I stumbled upon this site and figured I'd ask a quick question. I worked for about 3 years at company and left as of last week. I don't know ...
1
vote
1answer
199 views
Using SUID program to avoid having entries in sudoers
Well, I've done a lot of reading and documentation around possible exploitation of sudoers files and SUID programs, but don't have a deep enough knowledge to pick up the wisest possible solution for ...
0
votes
2answers
727 views
Is the root certificate issued from one Certificate Authority is same for all the requesting organisation?
Let me please explain the question a bit more through an example:
There are lots of companies who have their certificates signed by Verisign (or any CA). I understand that Verisign signs these certs ...
2
votes
1answer
51 views
What is the impact of leaving disabled root key on AWS instance?
I have a user which, when asked to create an IAM root user account, left the now disabled root key on the instance.
When asked to remove the root key, he said it's disabled now so what's the ...
0
votes
3answers
7k views
Leveraging curl to spawn a shell
So I'm doing a HTB challenge where I have leveraged the targets box use of reading a file that sets a url for curl in order to transverse down the directory and display the root flag in a report that ...
1
vote
1answer
48 views
Does it make sense to check command integrity after running it as root?
The other day Dave was hurrying for his project at night. He wanted to install homebrew on his Mac. He typed "homebrew" in Safari search bar, pressed return, and clicked into the first link. He copied ...
65
votes
4answers
13k views
Are most Linux systems that allow non-root users to execute code straightforwardly rootable?
long story short if you can execute code on a box it is usually straightforward to get root
(quote source)
The immediate implication of this quote (if it's accurate) is that if you're running a ...
35
votes
8answers
12k views
Why do companies not give root access to employees on their desktop machines? [duplicate]
Why do companies typically not give their employees root access to their desktop machines that are only used by a single employee?
If what I can do on my machine poses a threat to the rest of the ...
1
vote
2answers
381 views
Is an unencrypted log in android's storage considered insecure?
I'm currently checking the logs an Android app creates. There, I found an interesting entry: In android's
/data/data/app.being.checked/cache/ok_http_cache_dir
There are quite a lot of files and ...
-4
votes
1answer
162 views
Reason behind Chrome not running in root user in kali Linux?
Why does Google Chrome not run as root user by default in Kali Linux? Is it a security issue?
1
vote
2answers
504 views
Add main user account to docker group
I recently installed ubuntu on my home system. As I am going to mainly use it for machine learning research, I tried to set up a python environment. I tried doing this with docker to make things ...
4
votes
1answer
3k views
How to add a custom CA to androids trusted root system folder
As of Android 7.0 no custom certificate will be used by android apps. App developers need to specifically write codes and change app settings to follow a custom CA.
But this is difficult while ...
1
vote
2answers
98 views
An application started by the root user has root privileges?
I'm starting node.js on my server. I have to start the node.js HTTP server as root, because it will listen on the port 80. Once i start the node.js on port 80, if a person is able to execute some code ...
3
votes
2answers
936 views
Where to get all the root CA certs?
Is there a common place where we can download all the root CA certs and get frequent updates for changes? This is one place where we can find the CAs, but we need to keep on checking for the updates. ...
2
votes
2answers
362 views
Can root user have access to MySQL data?
Having MySQL using auth_socket as default authentication mechanism for the root user scares me, so I change it to password authentication with rigid controls on password quality and documentation.
If ...
-1
votes
2answers
143 views
Is it dangerous to turn on internet connection under su -c?
If someone would turn on internet connection using command su -c "/sbin/ifup ppp1" would it put system at risk (how bad) ?
0
votes
1answer
775 views
Why do some root and intermediate certificate authorities have “G2” or “G3” in the name? [duplicate]
I have noticed that some root and intermediate CAs have things like "G2" or "G3" in the name.
For example, take the certificate for amazon.com. The intermediate CA is DigiCert Global CA G2, and the ...
0
votes
1answer
61 views
Possible Security threats and mitigations while accessing `/root` through any browser?
I asked this question on Unix Stackexchange. How to access /root directory from a browser?
I got an answer (in a comment by @dsstorefile) that It can be accessed either way :
By running chmod 0777 ...
1
vote
0answers
276 views
SUID not executing as root [duplicate]
I am trying to learn about SUIDs and have run into bit of a stumbling block - I have a ubuntu 16.04 system. I have set a few default binaries such as vim, find et al. to have SUID permissions as ...
4
votes
1answer
222 views
How to properly protect /home with separate user accounts on Linux
A great quote from this InfoSec stackExchange thread.
The way to prevent malicious code from damaging files in your home
directory is to not run it using your account. Create a separate_user
...
3
votes
2answers
1k views
Privilege Escalation Wordpress
I have access to a Wordpress blog and want to read the server's /root directory that belongs to the user "root" and not "www-data". I also know his password, but I can't open an interactive shell to ...
8
votes
3answers
701 views
How do I create an invisible and persistent user on linux?
For my software security class we are required to hack into a server created by our professor. I have hacked into the server, and have the password for the root user.
Now that I am root, I would ...
0
votes
2answers
64 views
Prevent program from switching to user without password
I created a user with useradd without specifying a password. When I try to
sudo -u theuser echo hi
I am being prompted for my admin password (unless specified otherwise in the sudoers file, of ...
100
votes
13answers
14k views
Why is root security enforced but $HOME typically unprotected?
Coming from the comments in this question Why is it bad to log in as root?:
The sudo mechanics is in use so non-administrative tools "cannot harm your system." I agree that it would be pretty bad if ...
