ln

Privilege escalation

This executable provides a mechanism for privilege escalation by indirectly enabling elevated privileges, such as setting the SUID bit or modifying the ownership of another executable.

CommentThis overrides ln itself with a symlink to a shell (or any other executable) that is to be executed as root, useful in case a sudo rule allows to only run ln by path. Warning, this is a destructive action.
Sudo
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
RemarksIf there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....
```
ln -fs /bin/sh /bin/ln
ln
```