← 문제 라이브러리
Security Beginner SECURITY-004 · 14 min

Sudo policy grants command access but denies required shell path

IAM무료
시나리오

The command is technically allowed, yet execution still fails because the wrapper path differs from the approved binary.

먼저 볼 것
  • Identify the primary failure signal in the IAM scenario.
  • Separate visible symptoms from the underlying technical dependency.
  • Describe the safest recovery path and the follow-up prevention work.
점검 체크리스트
  1. Summarize the current impact and the last known change.
  2. Collect direct evidence from logs, runtime state, and configuration before changing anything.
  3. Separate immediate recovery from permanent prevention work.
복구와 재발 방지

Choose the smallest safe recovery action first, then record the prevention work that reduces repeat incidents.

같이 보면 좋은 질문
Why do sudo wrapper issues create privilege confusion?

The visible command may be allowed while the real executable path or wrapper target falls outside the granted policy.

What is the correct troubleshooting step?

Resolve the exact executable path and compare it against the granted sudo rule rather than trusting the wrapper name alone.