Re: Comparing -k and -K

On 12/27/22 6:58 PM, Jason Franklin wrote:
> Now I understand why people use "-k" in their logout scripts.

I'm now wondering how likely it is that someone / something could 
leverage remaining access.

E.g. Suppose I close an XTerm that I had just used sudo in, walked away 
from, but did not lock my system.  --  Could someone open a new XTerm, 
somehow getting the same PTY, and leverage the remaining sudo credential 
timeout?

I would naively assume that the caching couldn't be subverted that 
easily.  I would hope that there is more than just TTY / PTY to identify 
the session.  Ideally it should probably include PID and possibly even 
PPID in addition to the TTY / PTY.

Can ~> will someone explain the potential vulnerability that flushing 
the terminal's cached time with `-k` closes?

Thank you and have a good day.



-- 
Grant. . . .
unix || die

____________________________________________________________
sudo-users mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-users