On 10/6/23, 11:52, "Sam Morris" <sam(a)robots.org.uk> wrote:
______________________________________________________________________
On 04/10/2023 17:02, Spike White wrote:
We see in other places in this McAfee script that they run this
command
using 'su' instead of 'sudo'.
su -s /bin/sh -c "LD_LIBRARY_PATH=... ${PROGROOT}/bin/macmnsvc
status" mfe
…
Anyway, it's McAfee's problem to fix now. We'll report
it and I'm sure
they'll figure out a solution.
If they are root and want to drop privileges then they would be better
served by runuser or setpriv. …
…or start out as non-root user to begin with…
(It’s a peeve of mine when security companies don’t follow best practice of elevating only
if absolutely necessary.)
--
Pat Larkin | Manager – LinuxIMO
Sabre TEO | Texas USA