$>   KNOWLEDGE AREA

Linux privilege escalation

Permissions, processes, namespaces, and local boundaries.

8 topics

Linuxadvanced

Filesystem races and check-use separation

A time-of-check/time-of-use race occurs when a security decision uses one object state and the later operation acts on a changed state.

race-conditionslinux
Linuxadvanced

Linux namespaces and container boundary analysis

Namespaces provide separate views of resources such as process IDs, mounts, users, and networking.

namespaces-and-containerslinux
Linuxfoundation

Linux permissions, identity, and access decisions

Linux access depends on credentials, permission bits, ACLs, capabilities, mount options, and the operation being attempted.

permissions-and-identitylinux
Linuxintermediate

PATH, environment, and helper-program trust

Programs sometimes launch helpers by an unqualified name or consult environment variables for configuration and library loading.

path-and-environmentlinux
Linuxintermediate

Procfs, process environments, and inherited descriptors

Procfs exposes views of process state such as mappings, command lines, descriptors, and environment, subject to access controls.

proc-and-descriptorslinux
Linuxintermediate

Scheduled jobs, services, and writable execution inputs

Periodic jobs and services run with a configured identity and environment.

scheduled-jobslinux
Linuxintermediate

Set-user-ID and Linux capabilities

Set-user-ID changes effective identity when an executable is started, subject to mount and tracing conditions.

suid-and-capabilitieslinux
Linuxintermediate

Sudo rules and delegated program capabilities

A sudo rule delegates a particular execution context, not merely a binary name.

sudo-and-delegationlinux