the_emulator

ACLs allow bypassing sudoedit's writability checks

4

I have found one more extremely similar bypass than the previously-reported #1310 with ACLs this time: Prep: (with alice here by the user which will exploit) ``` sudo su sysctl...

Fix the problem by throwing an error if the number is negative or unexpected, added a test too. This is a suggestion only. Thread: https://github.com/trifectatechfoundation/sudo-rs/issues/1311

Malicious or misconfigured PAM module can DOS sudo-rs via num_msg=-1

2

PAM modules can send a `num_msg`, which is handled improperly by `sudo-rs`, as it is assumed this is a positive number without any checks. Negative PAM message counts cause integer...