This is such a venerable and ancient class of bugs, going at least as far back as AIX 3. Glad to see they're still makin' 'em like they used to.

(If you had SSH access to a host in your Tailscale ACL, you could log in as `-i` and get a root login.)

▲

RossBencina 3 hours ago | parent | next [-]

I'm somewhat alarmed that the context that this bug was running in was capable of root login. Is there a reason that an SSH login process would, by default, have enough capabilities to facilitate direct root login?

	▲	yjftsjthsd-h 3 hours ago \| parent [-]
		If it runs as your user and can only log in as you, then I wouldn't expect it to be able to become root. But if it can log you in as different users, I would expect that 1. it needs to run from root, and 2. it can log in as root.

▲

iririririr 3 hours ago | parent | prev [-]

you can also add parameters to env vars in some popular cloud providers for the same effect.