How to get root on Ubuntu 20.04 by pretending nobody’s /home
- Cool story! I’m especially happy with the choice to move to Debian now. 😅
accountsservice lowers it’s privilege level (what is this actually called at the kernel level?) to read the
- This file was added in a Ubuntu-specific patch to
accountsservice, and symlinking it to
accountsservice to hang.
- The lower privilege level then lets you crash
accountsservice by signalling to it.
- If you do this when logged out, gdm thinks no users exist on the system (user count defaults to zero) and lets you create a new (root) user.