Most 'interesting' programs have ways to spawn interactive shells. This
is no different from e.g. ! in mutt or :! in vi or so on. It's not
generally safe to leave arbitrary programs open in a terminal when run
with root privileges.

If you must walk away from your terminals then you should lock them,
either using tmux's lock-session feature or your desktop's screensaver
locks are good mitigations against someone using your computer without
your authorization. (Note that e.g. versions without the 'b' shell
option also allowed 'd' to delete files.)

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1603800

Title:
  sudo ncdu allows access to root shell easily

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ncdu/+bug/1603800/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to