If you run macOS High Sierra version 10.13.1, be sure to install today's update.


 
Thread Tools Search this Thread
Operating Systems OS X (Apple) If you run macOS High Sierra version 10.13.1, be sure to install today's update.
# 1  
Old 11-29-2017
If you run macOS High Sierra version 10.13.1, be sure to install today's update.

Some hackers found a security hole in macOS High Sierra and tweeted it to the world before telling Apple about the problem. You can see the details from PC Magazine's daily news here: Apple Releases Fix for MacOS High Sierra 'Root' Bug. The original story this morning was published before a patch was available from Apple.
These 3 Users Gave Thanks to Don Cragun For This Post:
# 2  
Old 11-30-2017
Yeah, I wonder why most people do not set the root passwd on their OSX (macOS) machines. I guess most users do not work on the command line when using OSX (macOS)?

One simple fix, I read on the net, was to simply have a root passwd (which I have already, of course) ..... but anyway, I installed the update yesterday on all my Macs.
This User Gave Thanks to Neo For This Post:
# 3  
Old 11-30-2017
I run all my machines as a non-admin user so therefore I should be relatively safe. I re-boot to go into admin user mode instead of logging out from non-admin and logging back in to admin mode.

Don, thanks for the heads up...
# 4  
Old 11-30-2017
Quote:
Originally Posted by wisecracker
I run all my machines as a non-admin user so therefore I should be relatively safe. I re-boot to go into admin user mode instead of logging out from non-admin and logging back in to admin mode.
Actually, even as a non-admin users, you can open a terminal and su to root.

Also, I also run macOS as a non-admin user; but when you install a new upgrade, etc the system will ask for your admin passwd.

Basically, everyone should have a root password on macOS even though they do not run as admin. If all users set a root password, then the update would not have been necessary, according to what I read when I dug into the details. The issue, or so it seems, is that many or many most macOS users seem to rarely work on the console and do all their work via the Mac GUI.
This User Gave Thanks to Neo For This Post:
# 5  
Old 11-30-2017
What a howler of a bug!

I don't remember if I ever even set the root password, I use root so infrequently, and only with sudo. It's a bit silly that they don't enforce that it is set.

My machines were both automatically updated by the time I got up this morning, no action required.
# 6  
Old 11-30-2017
Hi.

The macOS box I use is not physically accessible to anyone else. I was concerned that ssh access might allow the bug, so I tried it, and I failed to gain access.

In addition, have a root password, so I was not concerned about the bug, but it leaves me a little less trusting of Apple ... cheers, drl
Code:
OS, ker|rel, machine: Apple/BSD, Darwin 17.2.0, x86_64
Distribution        : macOS 10.13.1 (17B1003), High Sierra

# 7  
Old 12-01-2017
Quote:
Originally Posted by Neo
Actually, even as a non-admin users, you can open a terminal and su to root.

Also, I also run macOS as a non-admin user; but when you install a new upgrade, etc the system will ask for your admin passwd.

Basically, everyone should have a root password on macOS even though they do not run as admin. If all users set a root password, then the update would not have been necessary, according to what I read when I dug into the details. The issue, or so it seems, is that many or many most macOS users seem to rarely work on the console and do all their work via the Mac GUI.
Well I have tried using both sudo -s and su ladmin in non-admin mode and neither give me access...
OSX 10.13.0, not updated this machine yet, the iMac is done.
Code:
Last login: Fri Dec  1 17:42:33 on ttys000
AMIGA:amiga~> sudo -s
Password:
Sorry, try again.
Password:
amiga is not in the sudoers file.  This incident will be reported.
AMIGA:amiga~> 
AMIGA:amiga~> su ladmin
Password:
su: Sorry
AMIGA:amiga~> su ladmin
Password:
su: Sorry
AMIGA:amiga~> _

Login or Register to Ask a Question

Previous Thread | Next Thread

7 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Issue with shutdown command in script (MacOS High Sierra)

Hello, I have a backup script that runs an rsync backup to an external drive. I use the script frequently on Windows and Linux and have installed it on a Mac. The script has an option to run shutdown after the backup has completed. Since backup can take hours to run, this is an option that is... (10 Replies)
Discussion started by: LMHmedchem
10 Replies

2. Shell Programming and Scripting

Terminal running bash/rsync script does not close with exit (MacOS High SIerra)

Hello, I am running a bash script to do an rsync back on a computer running MacOS High Sierra. This is the script I am using, #!/bin/bash # main backup location, trailing slash included backup_loc="/Volumes/Archive_Volume/00_macos_backup/" # generic backup function function backup {... (12 Replies)
Discussion started by: LMHmedchem
12 Replies

3. Shell Programming and Scripting

Issue with pwd for script run by double click on script (MacOS High SIerra)

Hello, I have the following script that just archives and clears some log files. #!/bin/bash # script: archive_logs_and_clear # add date to logfile names and copy archive directory # clear logs # change to script directory cd ... (4 Replies)
Discussion started by: LMHmedchem
4 Replies

4. UNIX for Beginners Questions & Answers

When I run the code yesterday I am getting output,when I run same code today I am getting error?

If run the below code today its creating all directory and getting output files,I f run same code tomorrow I am getting error. can any one give suggestion to sortout this error. OSError: no such file or directory : '062518'My code looks like this import paramiko import sys import os ... (8 Replies)
Discussion started by: haribabu2229
8 Replies

5. UNIX for Beginners Questions & Answers

Capture power button press on MacOs High Sierra?

Hello everyone! I'm developing a MacOs Application in python and I'm having some issues trying to find information related to the power button pressed event. I know that in Ubuntu 14.04 you can find information about it on the acpi folders, but I realized that here in Mac that process is... (0 Replies)
Discussion started by: xedge
0 Replies

6. Solaris

Install update 6 on solaris with update 3

I want to update my solaris 10 server which is currently on update 3 stage. A new application require it to be on update 6. What is the best way to make it update 6. should i just install the patch or should i go for the liveupgrade?? thanks for you help in advance (3 Replies)
Discussion started by: uxravi
3 Replies

7. Solaris

After update Solaris version, HBA driver still need to install?

Hi all I had update a server from Solaris 8 to Solaris 10 is it the HBA driver still need to reinstall? since i can get the driver info as below: root@sgerpdev # fcinfo hba-port HBA Port WWN: 21000003ba9b58a3 OS Device Name: /dev/cfg/c1 Manufacturer: QLogic Corp. ... (1 Reply)
Discussion started by: SmartAntz
1 Replies
Login or Register to Ask a Question