pentestmonkey/unix-privesc-check

Add support for trusted users and groups

GoogleCodeExporter opened this issue · 2 comments

We need a list of trusted users and groups. We could use this list to avoid 
reporting write access that the user does not care about.
On Linux root user would be trusted. Root group too probably if it had no 
members.
On AIX the user may consider the bin user to be trusted.

Original issue reported on code.google.com by bernardo.damele on 22 Oct 2012 at 9:11

Original comment by bernardo.damele on 22 Oct 2012 at 9:16

  • Added labels: Component-UI, Component-Logic, Usability
Skeleton of user_is_trusted and group_is_trusted are coded in user and group 
libraries.

Original comment by bernardo.damele on 30 Oct 2012 at 2:24