Timeline for High Sierra root vulnerability: how to check if someone logged in remotely?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 30, 2017 at 21:55 | comment | added | Brian Mc | Yes, thanks for the clarification. My update was providing a way to detect if someone ran the exploit to logon locally. Because I was not able to run the exploit remotely I do not know what the log entry would look like. Thanks. | |
| Nov 29, 2017 at 21:27 | comment | added | flindeberg | This does not capture the "remote in as root"-case, which happened if you had enabled Screen Sharing, but the local "escalate to root"-case. I'm not saying you didn't say that but clarifying for readers. | |
| Nov 29, 2017 at 21:11 | history | edited | Brian Mc | CC BY-SA 3.0 |
added 166 characters in body
|
| Nov 29, 2017 at 19:00 | history | answered | Brian Mc | CC BY-SA 3.0 |