Comment 4 for bug 65541

Revision history for this message
Thomas Hood (jdthood) wrote :

Something that should be explained to people using sudo for the first time is that sudo makes the terminal in which it is run vulnerable to malware after sudo has been used to run any command. (After the user does, e.g., "sudo tail /var/log/syslog", any other command the user runs in the same terminal can itself use sudo to elevate its privileges, until the timeout expires.) Users should perhaps be advised to run third party scripts only in freshly launched terminals.