• _edge@discuss.tchncs.de
      ·
      7 months ago

      Yes, that's my understanding. A normal user cannot do this. (And of course, an attacker shouldn't not control a local user in the first place.)

      Physical access is also a risk, but physical access trumps everything.

    • fl42v@lemmy.ml
      ·
      7 months ago

      Unless they find another way to escalate privileges... A bug, a random binary with suid, etc