Living Off the Land in Linux
I find a lot of these to be really contrived and not actually exploits.<p>For example, the first "issue" for yum[0] shows that you can create a RPM that will run arbitrary commands when installed, and then shows the example install command, which requires root access.  So, sure, if someone tricks you into running arbitrary commands as root, you're hosed.  I don't find this particularly novel or interesting.<p>Then there are several supposed "SUID issues", like the second one for cat[1]: if you've for some batshit-insane reason decided to mark cat as SUID root (or ask someone with root access to copy it to your homedir and mark it SUID root... okay), then people can do nefarious things with it.  Um... duh?<p>[0] <a href="https://gtfobins.github.io/gtfobins/yum/" rel="nofollow">https://gtfobins.github.io/gtfobins/yum/</a><p>[1] <a href="https://gtfobins.github.io/gtfobins/cat/" rel="nofollow">https://gtfobins.github.io/gtfobins/cat/</a>