On 10/6/23, 11:52, "Sam Morris" <sam@robots.org.uk> wrote:
______________________________________________________________________
On 04/10/2023 17:02, Spike White wrote:
> We see in other places in this McAfee script that they run this command
> using 'su' instead of 'sudo'.
>
> su -s /bin/sh -c "LD_LIBRARY_PATH=... ${PROGROOT}/bin/macmnsvc
> status" mfe
…
> Anyway, it's McAfee's problem to fix now. We'll report it and I'm sure
> they'll figure out a solution.
If they are root and want to drop privileges then they would be better
served by runuser or setpriv. …
…or start out as non-root user to begin with…
(It’s a peeve of mine when security companies don’t follow best practice of elevating only if absolutely necessary.)
--
Pat Larkin | Manager – LinuxIMO
Sabre TEO | Texas USA