A municipal Linux backup script runs as root and embeds database credentials in clear text. How should the tester frame this during privilege-escalation review?
Select an answer to reveal the explanation.
Short Explanation
Root backup jobs are like a master key on a lanyard—and sometimes the password to the safe is written on the keychain tag. Reading those scripts often yields secrets and shows how a writable path could become an elevator.
Full Explanation
Privileged backup and maintenance scripts commonly contain database or service credentials and may introduce writable-script or insecure path issues. Linux privilege-escalation methodology includes reviewing such jobs for secrets, ownership, permissions, and how they are invoked. Remediation typically includes secret vaulting, least privilege for the job account, and hardening script writability. Framing the class helps owners fix the pattern across hosts.