On Wednesday, May 2, 2018 4:25:58 PM CEST Iain Rae wrote:
if they've got sudo privs to install software in the system area
as root
then any malicious program is going to emulate su/sudo in which case
you're rooted in both scenarios.
In order to emulate su/sudo, the binary needs to have special permissions.
Programs downloaded by web browsers do not get them and non-privileged users
cannot grant such permissions.
I just wanted to say that many users would not need sudo access at all if they
were able to install software to their home directory in a way that it works
out of the box.
Kamil