Bad, BAD idea to try to get the old behavior back.įor reference, here's the three-liner. I was booed out of the thread by the fanboys, then got banned from it from calling out lies. I even supplied a three-line proof-of-concept script that would simply sit around (as a regular user) waiting for a sudo event to appear anywhere, then instantly gain root access to the system. I wrote on the Mac forums earlier about this previous behavior which is a gaping security hole. Hadn't even noticed my new Sierra Mac now behaved properly. I came here from googling because I couldn't remember how I would change the old behavior to this new, correct one (used by every other UNIX-y OS out there). Original very long rant-y post, correctly pointed out to be blahdiblah:
TRUECRYPT SIERRA FULL
The reason being that it's trivial to exploit, and when exploited, the malignant code doing so will have full control of your system. This old behavior, while an option to sudo, is used as a default by NO OTHER UNIX-y OS that I have ever encountered. I've briefly looked over the changelog for 1.7 to 1.8 but could not come up with anything significant other than there being a mention of a policy plugin for Sierra when running sudo -V.Ĭan anybody help me figure out what has changed? I have a script that relies on the sudo timeout value for a keepalive and on Sierra it is prompting for the password constantly since it seems to no longer use a timestamp for the root user.
Looking at /ect/sudoers, the timestamp_timeout value is not set to 0. # Run in terminal pane #2: (does not prompt for password) This seems to only happen for the root user the following works as expected on all OS versions including Sierra: # Run in terminal pane #1: (prompts for password) It does not prompt for the password within the same terminal pane. However, on Sierra, the second command prompts for the password again.
The above works as expected on earlier versions of OS X. # Run in terminal pane #2: (should NOT prompt for password) See the following test case: # Run in terminal pane #1: (should prompt for password) After upgrading to MacOS Sierra (10.12), my sudo command seems to be acting differently.
0 kommentar(er)
