sudo_digest_toctou_poc_CVE-2015-8239

sudoers DigestSpec TOCTOU POC Rationale Alyssa Milburn https://twitter.com/noopwafel discovered a TOCTOU race condition bug in sudo when the DigestSpec setting is used. The DigestSpec setting can be used to allow a user to sudo a binary if and only if its hash matches a prescribed value. See man...