Investigation·SA0002

Works as Root

The watchtower monitoring service starts with sudo but cannot read its rules file when run as the real service account.

Medium~20 minTerminal
Things You Need to Know
▸ Users, Groups, and Service Accounts
📖 Reading · ~4 min · Source coming soon
▸ Reading Permission Strings
📖 Reading · ~5 min · Source coming soon
▸ Files vs. Directories
📖 Reading · ~4 min · Source coming soon
▸ Ownership and Least Privilege
📖 Reading · ~4 min · Source coming soon
Quick Learning

You need to sign in to start the workspace for this problem. You can read everything above without signing in.

Mission

Trace permissions across the full path and grant watchtower only the read and traversal access it needs.

You'll Practice
Linux users and groupsfile and directory permissionseffective accessleast privilege