A county Linux sudoers entry lets a standard user run a text editor as root. How should the tester interpret this class of finding?
Select an answer to reveal the explanation.
Short Explanation
Handing someone root's notepad is basically handing them root's keys. Sudo to editors, shells, or interpreters is a classic dangerous sudoers class — conceptually root-equivalent. Bash as the login shell does not make that safe.
Full Explanation
Dangerous sudoers configurations that allow execution of shells, editors, or language interpreters as root commonly enable privilege escalation to full root control through intended program features. Testers should recognize and report this misconfiguration class conceptually without providing exploit recipes. The risk is not limited to package managers, and login shell choice does not neutralize it. Remediation is least-privilege sudo rules and removal of broad root program grants.