Kusagadzikana kwakanyanya mu sudo

Iine pwfeedback sarudzo inogoneswa muzvirongwa sudo, anorwisa anogona kukonzera buffer kufashukira uye kuwedzera maropafadzo avo pane system.

Iyi sarudzo inogonesa kuratidzwa kwekuona kweakapinda password mavara se * chiratidzo. Pakugovera kwakawanda inovharwa nekusingaperi. Zvisinei, mu Linux mint ΠΈ Elementary OS inosanganisirwa mukati /etc/sudoers.

Kushandisa njodzi kune anorwisa kwete hazvo iva pane rondedzero yevashandisi vanotenderwa kumhanya sudo.

Kusagadzikana kuripo mukati sudo shanduro kubva 1.7.1 pamusoro 1.8.30. Version vulnerability 1.8.26-1.8.30 pakutanga yaive mubvunzo, asi parizvino zvinozivikanwa kuti ivo vari panjodzi.

CVE-2019-18634 - ine ruzivo rwechinyakare.

Kusagadzikana kunogadziriswa mushanduro 1.8.31. Kana zvisingaite kugadzirisa, unogona kudzima sarudzo iyi mukati /etc/sudoers:

Defaults !pwfeedback

Source: linux.org.ru

Voeg