Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more

Questions tagged [root]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
156 views

How does a hacker get access to the root user when disabling the sandbox in puppeteer, and what does it look like?

You'll see stuff like the first comment here that adding the --no-sandbox flag when launching puppeteer "is a giant security hole" (upvoted many times). Puppeteer troubleshooting docs say &...
Lance's user avatar
  • 622
1 vote
0 answers
74 views

Is it common practice that vendors put own root certificates on customer devices? [closed]

At work, we are deploying a new VoIP solution, and as part of that, we are supposed to install a custom root certificate on our computers and mobile devices. The manufacturer of that VoIP solution ...
Torsten Bronger's user avatar
1 vote
1 answer
341 views

disabling root login and using rescue mode

We all know that disabling access to root over ssh is essential for security, that's not what I'm referring to here. I have seen a security best-practice recommendation to either completely disable ...
Kevin Keane's user avatar
  • 1,107
1 vote
1 answer
300 views

Bypassing root detection qualify as a vulnerability?

I am working on security testing of an android application. There is a root detection in the Android application. objection, frida etc. It is possible to bypass this with ways. My main question is: ...
Exnovan's user avatar
  • 35
0 votes
2 answers
141 views

Security risk by setting authorized_key for root user and limiting to one command?

Sometimes a process crashes and IT department has to log into the server and do a sudo systemctl restart apache2. The idea was now to create a wepage an another server (of course) where users can ...
Hannes's user avatar
  • 121
2 votes
1 answer
372 views

Is running rsync as root problematic?

Is there a security risk with running rsync as root to copy potentially malicious files? Or for that matter with any read command like cp, cat, du? Background: I'm moving data from various systems ...
Fizz Khalifa's user avatar
-1 votes
2 answers
672 views

How to backdoor windows?

Studing pentest, I was astonished by how easy it was to backdoor a Linux machine after I got root. I just needed to compile a program like this: #define _GNU_SOURCE #include <stdlib.h> #include &...
psico_disk's user avatar
1 vote
0 answers
559 views

Get root permission on android for metasploit

Is there any way to get into the root file system in android with an already installed msfvenom apk in reverse_tcp (to get the whatsapp encryption key)
LWX 's user avatar
  • 11
-1 votes
3 answers
373 views

What prevents Windows from being as secure as Linux? [duplicate]

According to wikipedia, Linux's security compared to Windows is generally due to "the malware's lack of root access." Why doesn't Windows just fix this?
atolnay's user avatar
7 votes
2 answers
2k views

/opt and sudo unzip to /opt, is it safe?

Usually we place things in /opt so they are owned by root but normal users can execute them. This prevents normal users modifying the binaries so they cannot execute arbitrary stuff. However, to put ...
Guerlando OCs's user avatar
0 votes
0 answers
156 views

Is it possible to inject code using physical memory access to jailbreak phones?

Is it possible to inject code into RAM using physical access? For example desolder the RAM chips, solder something between the original RAM chip and the phone motherboard, and use that to directly ...
userdatagram's user avatar
3 votes
2 answers
858 views

Privilege escalation through arbitrary file delete

Assuming that I can delete arbitrary files on a linux system as a non-privileged user, what methods exist to escalate my privileges this way?
user16910689's user avatar
1 vote
1 answer
628 views

Why include the root certficiate in the chain, if it is already in receiving parts' truststore?

If I have a self-signed CA certificate in my truststore, and I am sent a chain of certificates where the root CA is missing, is this a problem and if so why? Say that the last certificate in the chain ...
A_Weierstrass's user avatar
1 vote
2 answers
253 views

Does adding a new user (instead of just using root) help WSL2 security?

Does adding a non-root user do anything except hinder your own ability to make mistakes? Given the new updates on file perms in WSL2 (docs on file perms, more docs), doing everything as root on linux ...
belkarx's user avatar
  • 1,326
1 vote
1 answer
122 views

Read files protected with System Integrity Protection with sudo

I had a debate with a friend about the security model in new OS X versions. OS X El Capitan and newer have the System Integrity Protection security feature which protects aspects of the OS even from ...
Paul's user avatar
  • 623
2 votes
1 answer
2k views

Security implications of rooting a SmartTV (LG)

This webpage will exploit your LG webOS smart TV, gain local root privileges, and install the webOS Homebrew Channel. rootmy.tv I really hate the constant ad breaks on YouTube and have rooted my LG ...
Sybil's user avatar
  • 1,469
0 votes
2 answers
227 views

Disable everything but a hidden command for root access

linux security and root access question.... I'm setting up a server that has a validator node running on it for a blockchain. I was trying to harden the security of my server. I set up ufw for all ...
user267912's user avatar
2 votes
1 answer
4k views

Root detection can be bypassed using Magisk hide: how to mitigate?

I have recently been assigned a new security fix for my Android App. The Vulnerability Assessment and Penetration Testing (VAPT) team used Magisk and Magisk hide to bypass the Android root detection ...
Pradip Tilala's user avatar
0 votes
1 answer
135 views

Can I use root account if every server only runs one service [Debian/Ubuntu Server] [duplicate]

Usually people say directly using root account is a very bad idea. However, my current setting is like this: to achieve a higher level of isolation, all services have their own virtual machine ...
user avatar
2 votes
2 answers
798 views

Secure boot for devices which don't have hardware security element

I understand that Root of Trust is necessary for implementing a secure boot on a device. Root of Trust is strong and trust worthy if this comes from hardware security elements like HSM/TPM/.. So for ...
Akhilesh Gupta's user avatar
1 vote
0 answers
44 views

School wants me to install a root certificate to connect to their network on my personal laptop [duplicate]

What would this do? I'm a bit of a beginner to root certificates so stay with me here, I Don't want it to be able to see what I'm doing at home.
ScubaStriker's user avatar
1 vote
2 answers
174 views

What is the added security of “PermitRootLogin no” alone?

Referring to this Q&A: The setting PermitRootLogin no alone does not prevent su - after logging in as a normal user. As described in the referenced answer, there it is possible to prevent su with ...
Attilio's user avatar
  • 179
1 vote
3 answers
1k views

Why is it not recommended to permanently use the root account for all tasks?

Yes, I did read this answer: https://apple.stackexchange.com/questions/192365/is-it-ok-to-use-the-root-user-as-a-normal-user/192422#192422 But I still fail to understand the reasoning behind this ...
gaazkam's user avatar
  • 6,017
2 votes
1 answer
318 views

Possible to inject in the middle of a ROOT NOPASSWD command with a wild card?

I'm testing for privilege escalations on a Ubuntu 18.04 host, and after running sudo -l , I've discovered a couple of root NOPASSWD commands for a standard user (w/unknown password). These commands ...
Duck's user avatar
  • 41
0 votes
1 answer
645 views

Should root certificates have OCSP or CRL for it? [duplicate]

Should root certificates have OCSP or CRL for its own revocation status? So here is what I mean: Intermediate Cert -> http://example.com/root.crl SAN Cert -> https://example.com/intermediate.crl ...
Example person's user avatar
0 votes
0 answers
29 views

How should an application verify a servers certificate? [duplicate]

Im developing an application and i want this application to connect to my server via ssl (using openssl currently). I want this application to verify my servers certificate. The problem is i dont ...
StillWaters77's user avatar
0 votes
1 answer
451 views

offline root CA workflow

I have reviewed several discussions here regarding offline root CA management. While useful, none quite capture my question. Firstly it presumably would not be generally assessed as an 'offline' root ...
r.l.'s user avatar
  • 41
1 vote
0 answers
142 views

Running non-root process in docker vs bare metal

Recently I faced argument that threw me a bit off balance. I've been suggested that running application bare metal is actually more secure than running it in container. Reasoning behind that is that ...
Lapsio's user avatar
  • 217
2 votes
2 answers
2k views

How do I gain root access to a system using a setuid root binary?

Assuming that I have no ability to use sudo and rather limited permissions, but I have a shell script exploit that allows to me change the file ownership of a file to the current user by running a ...
Koala's user avatar
  • 23
1 vote
0 answers
418 views

SECURITY VIOLATION: Root login attempted - Which password is affected?

Logwatch shows that proftpd was tried to be logged into using root 0.0.0.0 (111.254.68.221[111.254.68.221]) - SECURITY VIOLATION: Root login attempted I found: Normally, proftpd does not allow root ...
Anders B.'s user avatar
3 votes
0 answers
1k views

What are the security risks of running QEMU/KVM as root?

Context: I own a machine; I trust root and all the accounts. I virtualize untrusted guests using KVM, and don't want them to escape. When /dev/kvm has the right permissions, non-root users can run KVM ...
punkeel's user avatar
  • 131
0 votes
2 answers
556 views

How do I access a website on my phone without it being able to determine that it was accessed from the same phone and location?

How is it possible to create an account in a website with completely different credentials without the website being able to link the user of the first account and this new one? Tor is not a viable ...
JJrussel's user avatar
  • 111
0 votes
0 answers
208 views

SOC2 and the CentOS root user

One of our customers has the following requirement: according to SOC2 they need to block access to the CentOS root account. They mean any access, even with su root or sudo su. We have blocked the SSH ...
Michael's user avatar
  • 1,469
1 vote
0 answers
1k views

Can an SSL certificate be signed by two issuers at the same time? [duplicate]

Can an SSL certificate be signed by two issuers at the same time? Let's take an intermediate certificate as an example. It is usually signed by a root. A root certificate is often self-signed. In my ...
t7e's user avatar
  • 127
0 votes
3 answers
499 views

Does sudo ever de-escalate privilege while the program/command/service is running?

For Example Is it safer to do: $ sudo [cmd] [args] [enter user password] or $ su - [enter root password] # [cmd] [args] I always assumed they are the exact same thing, because sudo utilizes ...
0x5929's user avatar
  • 355
1 vote
1 answer
237 views

Can not setting password for root when installing linux be exploited?

Recently I've been thinking about how I installed my linux system (I went for debian). When I installed it, I chose not to enter password for root and only entered password for my user account. My ...
kytka's user avatar
  • 13
-1 votes
1 answer
112 views

MAC OS full admin rights and software removal in a corp environment

We have MAC OS for our developers (running with root). We also deploy an DLP endpoint agent. Now what happens, in some cases they just sudo and uninstall the agent because it slows down the machine. ...
cyzczy's user avatar
  • 1,588
1 vote
1 answer
3k views

Self Signed Certificate in Certificate of Chain [closed]

I setup an internal Root CA with another Intermediate CA, which will issue and sign the certificates for other internal servers. When I did the "openssl s_client -connect :443" it shows the error ...
JT Lai's user avatar
  • 11
0 votes
0 answers
184 views

Sufficient to only require 2FA for su elevation?

I have a small web-facing server on my home network. It is headless, and the only way to log in is to ssh with pubkey authentication from within the local network. I wanted to turn on a 2FA ...
user3734989's user avatar
2 votes
3 answers
457 views

Do I need to worry about vulnerabilities that require administrative privileges to exploit?

I am currently evaluating the impact that the recent NUC Firmware Advisory has on our machines. What confuses me is that fact that those vulerabilities are scored with a high risk score, but require(...
Heinzi's user avatar
  • 3,088
0 votes
0 answers
158 views

Government Root CA installed on computer/browser and Man-In-The-Middle [duplicate]

Some countries already have their government Root CA installed on computer/browsers. Is it possible for these countries to read Google etc. mails by using Man-In-The-Middle or similar technique(s)?
Kua's user avatar
  • 1
33 votes
2 answers
5k views

Ability To Change Root User Password (Vulnerability?)

I am studying for my RHCSA exam, and one of the topics is the ability to "change a forgotten root user password." This is an official exam objective and even has official Redhat documentation. How ...
Tobin Shields's user avatar
4 votes
1 answer
436 views

How can a bad process obtain root by waiting for a user to run a command as sudo?

A comment on this answer states: The whole linux desktop provides very little protection against bad processes running as the user. A bad process could just watch the keyboard input and wait for ...
Primusa's user avatar
  • 143
0 votes
1 answer
201 views

Employer Self Signed Root Certificate

I don't have knowledge into programming/cybersecurity so I stumbled upon this site and figured I'd ask a quick question. I worked for about 3 years at company and left as of last week. I don't know ...
crazytoaster's user avatar
1 vote
1 answer
426 views

Using SUID program to avoid having entries in sudoers

Well, I've done a lot of reading and documentation around possible exploitation of sudoers files and SUID programs, but don't have a deep enough knowledge to pick up the wisest possible solution for ...
programmersn's user avatar
0 votes
2 answers
2k views

Is the root certificate issued from one Certificate Authority is same for all the requesting organisation?

Let me please explain the question a bit more through an example: There are lots of companies who have their certificates signed by Verisign (or any CA). I understand that Verisign signs these certs ...
Dexter's user avatar
  • 245
2 votes
1 answer
138 views

What is the impact of leaving disabled root key on AWS instance?

I have a user which, when asked to create an IAM root user account, left the now disabled root key on the instance. When asked to remove the root key, he said it's disabled now so what's the ...
MGoBlue93's user avatar
  • 183
1 vote
3 answers
14k views

Leveraging curl to spawn a shell

So I'm doing a HTB challenge where I have leveraged the targets box use of reading a file that sets a url for curl in order to transverse down the directory and display the root flag in a report that ...
3therk1ll's user avatar
  • 147
1 vote
1 answer
115 views

Does it make sense to check command integrity after running it as root?

The other day Dave was hurrying for his project at night. He wanted to install homebrew on his Mac. He typed "homebrew" in Safari search bar, pressed return, and clicked into the first link. He copied ...
tonychow0929's user avatar
  • 2,257
65 votes
4 answers
13k views

Are most Linux systems that allow non-root users to execute code straightforwardly rootable?

long story short if you can execute code on a box it is usually straightforward to get root (quote source) The immediate implication of this quote (if it's accurate) is that if you're running a ...
gaazkam's user avatar
  • 6,017