Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removed possibility to elevate privileges in code (commit: 3c2246b7dfdd6164dd5b7a0a74cfdc6585ea5a32) #80

Closed
tnyblom opened this issue Jun 23, 2022 · 4 comments

Comments

@tnyblom
Copy link

tnyblom commented Jun 23, 2022

In commit: 3c2246b the possibility to use this tool as a normal user and only allow the usage of sudo for scanning was removed as part of an IPv6 fix. Any particular reason why this change was included there?

@nmmapper
Copy link
Owner

The latest changes released days ago don't include that part of the code, it appears you are using an older version of the release which was released on Jan 14.

@tnyblom
Copy link
Author

tnyblom commented Jun 23, 2022

Hi,
I'm confused, in the latest code:

return self.default_args.format(nmap=self.nmaptool, outarg="-oX")

The "sudo" part is missing so the possibility to use with running my script as sudo is removed.

@nmmapper
Copy link
Owner

You, just ensure that you are calling the appropriate code with super user access. Where necessary.

@tnyblom
Copy link
Author

tnyblom commented Jun 26, 2022

My issue is that there has been an backward incompatible change that removes functionality and renders exposed API calls no-ops.
I now need to run any script that includes this library fully as root where as before I could simply add a line in sudoers that would allow the script user to run nmap (with any options if needed) as root without having to fully open up root access.
Running script as root when not needed seems like an unnecessary risk to me.

Might I ask why this change was done?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants