Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 49936

Privilege escalation is the act of exploiting a bug, design flaw or configuration oversight in an operating system or software application to gain elevated access throughout the environment

2 votes

Does the bash shell function import feature inevitably give rise to privilege escalation pro...

"Can this give rise to an escalation of privilege in combination with a setuid executable...?" You can't have setuid scripts on GNU so let's assume a setuid binary directly calling a Bash script. Not …
Steve Dodier-Lazaro's user avatar
28 votes
Accepted

Server for School Coding Assignments

What you need is relatively simple: you need to ensure that your students' unprivileged accounts are well confined. If you don't have a graphical environment involved, your situation is relatively sim …
Steve Dodier-Lazaro's user avatar
27 votes

Can the root user be removed from a *nix system to prevent privilege-escalation?

As argued by others, it makes no sense to "remove" the root UID (which is represented on UNIX as the UID 0). I would go even further and state that it makes no sense to freeze a system into not having …
Steve Dodier-Lazaro's user avatar
11 votes

Escalating from Apache shell to root

You are right that you gain access to the UID of the process/script you exploited. In the case of the Apache identity with no mandatory access control and no proper separation of developer and apache …
Steve Dodier-Lazaro's user avatar