In os query how to get the list of files that a user can execute with sudo?

I have a task to find binaries to be executed with root permission and using osquery find the path of the program. I found a few tables and tried the following but no luck

  1. select * from sudoers;
  2. select * from shell_history where uid=1234;

Please help

submitted by /u/tbhaxor
[link] [comments]

from hacking: security in practice https://ift.tt/3dd2R4V

Comments