Skip to content

Commit 7753429

Browse files
authored
Typo fix in sudo blog
1 parent ed73800 commit 7753429

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

content/blog/Three years of Rusty sudo.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ Security-minded people typically like to identify "the weakest link in the chain
6565

6666
To be absolutely clear, this is not a vulnerability in either su or sudo *per se*, but rather a combination of technical peculiarities that allows them to be used as a crowbar to widen a pre-existing crack. The truly vulnerable part here was AppArmor, and to a lesser degree, `su` was lacking adequate hardening.
6767

68-
So how do our versions of sudo and, also, our [re-implementation of su](https://github.com/trifectatechfoundation/sudo-rs?tab=readme-ov-file#aim-of-the-project) fair in this attack scenario?
68+
So how do our versions of sudo and, also, our [re-implementation of su](https://github.com/trifectatechfoundation/sudo-rs?tab=readme-ov-file#aim-of-the-project) fare in this attack scenario?
6969

7070
**1.** `su-rs` uses the `use_pty` code from sudo-rs, which in turn is heavily based on Todd Miller's `use_pty` code, which has been extensively used over the years. Qualys tried, but was not able to trick it into writing AppArmor config files.
7171

@@ -143,4 +143,4 @@ Today, sudo-rs is well-supported on Ubuntu, and some specialty Linux distros suc
143143

144144
### About Trifecta Tech Foundation
145145

146-
**Trifecta Tech Foundation** is a non-profit and a Public Benefit Organisation (501(c)(3) equivalent) that creates open-source building blocks for critical infrastructure software. Our initiatives on data compression, time synchronization, and privilege boundary, impact the digital security of millions of people. If you’d like to support our work, please contact us; see [trifectatech.org/support](https://trifectatech.org/support/).
146+
**Trifecta Tech Foundation** is a non-profit and a Public Benefit Organisation (501(c)(3) equivalent) that creates open-source building blocks for critical infrastructure software. Our initiatives on data compression, time synchronization, and privilege boundary, impact the digital security of millions of people. If you’d like to support our work, please contact us; see [trifectatech.org/support](https://trifectatech.org/support/).

0 commit comments

Comments
 (0)