Sudon’t or going rootless
summary
A concrete compliance trick: wire sudo to notify a team channel so each privileged command posts an alert, shaming ad hoc root access and pushing teams to build APIs instead. Implementation notes include adding a sudoers email hook or Slack webhook that fires on sudo and keeping a days‑since‑sudo metric to spotlight regressions. The claim is measurable: fewer manual sudo sessions, explicit alerts, and observable progress toward removing routine root access.
AI-written summary · about
chapters (4)
related talks
43mThe Hidden Dangers of Sudo
39mSudo For Defense: How can new or lesser-known features help you?
17mRust, make me a sudo!
01h 00mDemonstrating Binary Exploitation
58mDemonstrating binary exploitation
38mSecurity And Modern Software Deployment
52mDevOops: Redux
46mCultivating a Security-First Culture in Tech Organizations
