protecting against unsafe use of screen/tmux
15 Dec 2017 09:35 | linux | macOS | security | bash
It occurred to me recently that a lot of people probably use screen or tmux in ways that leave an easy path to privilege escalation open. For example if you start a screen session as your local user and then escalate to root inside the screen session. As soon as you do that, anyone with access to the non-root account can simply resume the screen session and immediately be root.
[read more...]