Investigation·SA0008

The Intern Has Too Much Sudo

An intern received unrestricted passwordless sudo for a two-command support task.

Medium~25 minTerminal
Things You Need to Know
▸ sudo rule shape
📖 Reading · ~5 min · Learn tab
▸ Exact commands
📖 Reading · ~5 min · Learn tab
▸ Negative privilege tests
📖 Reading · ~5 min · Learn tab
Quick Learning

You need to sign in to start the workspace for this problem. You can read everything above without signing in.

Mission

Delegate only report-api status and restart, then prove all other root actions fail.

You'll Practice
sudoersvisudoleast privilege