Review sudo rules for hidden root shells
Read the sudoers files on a shared jump host and find the rules that hand out root: a blanket NOPASSWD, an editor that can spawn a shell, and a wildcard path.
Briefing
The jump host gained sudo rules over the years for deploys, monitoring, and the help desk. You are reviewing them before an audit.
A sudo rule is only as narrow as the program it allows. Editors and pagers can open a shell. A * in a path also matches ../, so it can reach files outside the folder it seems to name. sudo -l -U user shows what one user may run.
jump-01 · Privilege audit
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.