liamg/traitor

sudo: wheel NOPASSWD false positive

blshkv opened this issue · 1 comments

Hello, I have sudo with permissive line:
%wheel ALL=(ALL) NOPASSWD: ALL

traitor reports false positive on all vulnerable test cases, and even pops a shell. But it can't exploit anything if the line is removed.

Could make sense to test from a non administrator account not belonging to the wheel group.