Skip to content

Commit ec91d2e

Browse files
committed
Documentation: Inform people that anon can su to root by default
\0 pointed out that this is not mentioned anywhere, technically making it a "local privilege escalation" bug. This patch adds it to the documentation, and I've also paid out the first $5 bounty to the "Kiwis for Kiwi" charity as per \0's request! http://serenityos.org/bounty/kiwis4kiwi.png
1 parent 06aec96 commit ec91d2e

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

Documentation/BuildInstructions.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,9 @@ Once you've built the toolchain, go into the `Kernel/` directory, then run
6060
**./makeall.sh**, and if nothing breaks too much, take it for a spin by using
6161
**./run**.
6262

63+
Note that the `anon` user is able to become `root` without password by default, as a development convenience.
64+
To prevent this, remove `anon` from the `wheel` group and he will no longer be able to run `/bin/su`.
65+
6366
Bare curious users may even consider sourcing suitable hardware to [install Serenity on a physical PC.](https://github.com/SerenityOS/serenity/blob/master/INSTALL.md)
6467

6568
Later on, when you `git pull` to get the latest changes, there's no need to rebuild the toolchain. You can simply rerun **./makeall.sh** in the `Kernel/` directory and you'll be good to **./run** again.

0 commit comments

Comments
 (0)