On 10/6/23, 11:52, "Sam Morris" <sam@robots.org.uk> wrote:
______________________________________________________________________
On 04/10/2023 17:02, Spike White wrote:
> We see in other places in this McAfee script that they run this command
> using 'su' instead of 'sudo'.
>
>     su -s /bin/sh -c "LD_LIBRARY_PATH=...  ${PROGROOT}/bin/macmnsvc
>     status" mfe

> Anyway, it's McAfee's problem to fix now.  We'll report it and I'm sure
> they'll figure out a solution.

If they are root and want to drop privileges then they would be better
served by runuser or setpriv. …

 

…or start out as non-root user to begin with…

(It’s a peeve of mine when security companies don’t follow best practice of elevating only if absolutely necessary.)

 

-- 

Pat Larkin | Manager – LinuxIMO

Sabre  TEO | Texas USA