A
A
account-62017-04-05 17:09:25
linux
account-6, 2017-04-05 17:09:25

Can I access my files if I know my account password?

Can a hypothetical attacker, knowing the password from my account, get access to my files that have such rights -rw-------? Those. can he log in as root remotely to my PC?

Answer the question

In order to leave comments, you need to log in

4 answer(s)
R
Rsa97, 2017-04-05
@account-6

These rights just give read and write access to the owner of the file.

M
Mikhail Konyukhov, 2017-04-05
@piromanlynx

If it has your password and shell:
1. If you have sudo
2. If you have any executables that you can edit from your user and they have suid-bit
3. If, for example, fpm installed on the machine is running as root and execute files from your home.
Yes, lots of ways. a question about the time to search for a hole.
If there is no shell, you can get it (for example, if you have sshd, then it will let you in by password).
Also, access to your account is most likely through pam, which means proftpd, sshd, and anything that looks at the network

S
Spetros, 2017-04-05
@Spetros

Those. can he log in as root remotely to my PC?

if your login is root, then yes.

Z
zooks, 2017-04-05
@zooks

Yes, if the profile files are unencrypted.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question