summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authormo khan <mo.khan@gmail.com>2019-09-29 20:17:47 -0600
committermo khan <mo.khan@gmail.com>2019-09-29 20:17:47 -0600
commita4809f8c5ca83960bb946012a74d1b0c6f65eb70 (patch)
treefc117f9e9ee9bd4c45e596d0dec1d02161173893
parent9244bc008dfb70fb89dbb6e42ea788ff9854e286 (diff)
Describe how to change another users password
-rw-r--r--README.md10
1 files changed, 9 insertions, 1 deletions
diff --git a/README.md b/README.md
index e382e0a..d8d1710 100644
--- a/README.md
+++ b/README.md
@@ -1093,9 +1093,17 @@ Rootly Powers and Processes
`/usr/bin/crontab` can be executed by any user because every user can have their own crontab entries.
The crontab files are only writable by the root user so the crontab program needs to run as root.
-
2. Enumerate a sequence of commands that let you modify someone’s password entry, and show how you could cover your tracks. Assume you had only sudo power (all commands allowed, but not shells or su).
+ ```bash
+ $ sudo -i
+ $ passwd otheruser
+ ```
+
+ The `passwd` command would appear in the history of the root user but I think
+ it's difficult to see who was acting as the root user when the password was
+ changed.
+
3. Create two entries for the sudoers configuration file:
a. One entry that allows users Matt, Adam, and Drew to service the printer,