~/talk

Sudo

Talkat FOSDEM 2022 · on Sunday, 2022-02-06· at 17:00· M.security· [security]

speaker

name:Peter Czanik

website:https://peter.czanik.hu

resources

video:https://video.fosdem.org/2022/M.security/security_sudo.mp4

slides:https://fosdem.org/2022/schedule/event/security_sudo/attachments/slides/5112/export/events/attachments/security_sudo/slides/5112/czp_fosdem2022_sudo_v2.pdf

summary

Sudo 1.9+ adds features to reduce blind spots in delegated admin access: configure per-command working directory and chroot to avoid granting full shell access; emit JSON-formatted logs for richer, machine-readable event data; use sudo_logsrvd relays to collect session recordings more securely and reliably across multiple hops; and log (and optionally intercept) sub-commands spawned by a sudo'd command so actions launched from shells or editors are visible and controllable.

AI-written summary · about

related talks