pandoc
File write
This executable can write data to local files.
- This function can be performed by any unprivileged user.
echo DATA | pandoc -t plain -o /path/to/output-fileThis function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.echo DATA | pandoc -t plain -o /path/to/output-fileThis function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.echo DATA | pandoc -t plain -o /path/to/output-file
File read
This executable can read data from local files.
- This function can be performed by any unprivileged user.
pandoc -t plain /path/to/input-fileThis function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.pandoc -t plain /path/to/input-fileThis function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.pandoc -t plain /path/to/input-file
Inherit
This executable can inherit functions from another.
- This function can be performed by any unprivileged user.
echo '...' >/path/to/temp-file pandoc -L /path/to/temp-file /dev/nullThis function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.echo '...' >/path/to/temp-file pandoc -L /path/to/temp-file /dev/nullThis function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.echo '...' >/path/to/temp-file pandoc -L /path/to/temp-file /dev/null