Skip to content

Commit 0799bd9

Browse files
authored
Update README.md
1 parent f0d2e57 commit 0799bd9

1 file changed

Lines changed: 0 additions & 10 deletions

File tree

  • src/linux-hardening/privilege-escalation

src/linux-hardening/privilege-escalation/README.md

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -440,16 +440,6 @@ Bash performs parameter expansion and command substitution before arithmetic eva
440440
# When the root cron parser evaluates (( total += count )), your command runs as root.
441441
```
442442

443-
- Preconditions:
444-
- You can cause a line you control to be written into the log consumed by the root script.
445-
- The script evaluates an untrusted variable inside ((...)), $((...)) or let.
446-
447-
- Mitigations (for defenders):
448-
- Never use arithmetic evaluation on untrusted strings. Validate first: `[[ $count =~ ^[0-9]+$ ]] || continue`.
449-
- Prefer integer-safe parsing with awk or mapfile and explicit regex checks.
450-
- Run log parsers as least-privileged users; never as root unless strictly necessary.
451-
452-
453443
### Cron script overwriting and symlink
454444

455445
If you **can modify a cron script** executed by root, you can get a shell very easily:

0 commit comments

Comments
 (0)