Hot answers tagged

6

Don't. /root/ is not world readable for very good reasons. If you really need to work with that file, put it someplace else.


3

If you have the "suid" version of busybox, you could try to make the date command execute as root like this: File /etc/busybox.conf: ... [SUID] date = ssx root.root ...


2

You have set NOPASSWD for the script /home/mukesh/Desktop/connect.sh, not anything inside it that requires sudo password. You need to run the script using sudo: sudo /home/mukesh/Desktop/connect.sh and then remove sudo from the script: #!/bin/bash pppoe-start It it's just a single command then you could just add that command to sudoers instead (no ...


2

If the software root is using can be configured to do "evil" stuff (or to display information in some unexpected way so that the root user does "evil" stuff out of not-knowing or false knowledge) by the config file, then that is a viable attack. In general, you weaken security, if access rights to edit ~/<configfile> can be more easily gained for that ...


1

Probably secure_path is set in /etc/sudoers. The path shown by which mysqlbackup is not included there, but it is shown in echo $PATH when run as your user or from a root login, right? It does seem odd though.


1

So the reason that you're backup is failing as a normal user is because the libdata file that mysqlbackup is attempting to copy/backup is owned by a different user (more than likely, 'mysql') or a privileged user. So, running mysqlbackup as an elevated user is probably the right choice here as you're attempting to do. I surmise that the reason you aren't ...


1

You could create a script to do that backup and either run it automatically via cron or give his user the possibility to run only that script via sudo (if you want it secure, make sure he can only read and execute the script, if he could edit, he could easily get more rights.)


1

It is apparent that the /root directory on your system does not have (at least) 'execute' permisions for the user 'yu', either through group membership or the 'other' bits. Thus, 'yu' cannot list the contents of the /root directory in order to determine if /root/1.txt exists or not. For further description of file and directory permissions (in Linux, as ...



Only top voted, non community-wiki answers of a minimum length are eligible