UNPRIVILEGED USERS WITH UID > INT_MAX CAN SUCCESSFULLY EXECUTE ANY SYSTEMCTL COMMAND.
ANOTHER SYSTEMD EXPLOIT
Owen Cruz
Other urls found in this thread:
smcv.pseudorandom.co.uk
en.wikipedia.org
twitter.com
Michael Gray
it juts passes a password
Eli Fisher
Pottering:
Such a typical response.
Julian Thompson
WTF does polkit even do? It's just one of those pieces of shitware that I habitually uninstall.
Samuel Powell
It's to allow normal users to peform tasks that should normally require admin access.
smcv.pseudorandom.co.uk
Describes it well.
Robert Rogers
That's a good explanation, thanks.
I'm still not going to use it because I don't need such a thing, but at least I can understand why it exists.
Adrian Morris
...
Camden Rogers
What is all this gibberish? Help me with my taskbar, it's disappeared. Obviously your fault since the last time I paid you to backup my video files.
Charles Kelly
It's not an exploit per say, but it definietly goes to show how bad code quality is.
Christopher Taylor
how does this ever happen