Linux privilege escalation refers to the process of gaining elevated access to a computer system, allowing an attacker to perform actions that would normally be restricted. For journalists, this can be particularly problematic, as it can compromise their devices and put their sources at risk. Privilege escalation can occur through a variety of means, including exploiting vulnerabilities in software or using social engineering tactics to trick users into granting elevated access.

Journalists rely on their devices to conduct their work, and these devices often contain sensitive information about their sources and stories. If an attacker is able to gain elevated access to a journalist’s device, they may be able to access this sensitive information, putting the journalist and their sources at risk. Hardening devices against privilege escalation is therefore essential for journalists who want to protect themselves and their sources.

Common escalation vectors

There are several common escalation vectors that attackers may use to gain elevated access to a Linux system. These include vulnerabilities in softwareweak passwords and misconfigured systems. Journalists can protect themselves against these vectors by implementing basic defenses, such as keeping their software up to date, using strong passwords, and configuring their systems securely.

Basic defenses

There are several basic defenses that journalists can implement to protect themselves against privilege escalation. These include patching vulnerabilities in software, using least-privilege principles to limit the damage that an attacker can do, and implementing access controls to restrict access to sensitive information. Journalists should also use encryption to protect sensitive information, both in transit and at rest.

Coordinating with IT

In many cases, journalists will need to work with their organization’s IT department to implement these defenses. This can be challenging, as IT departments may have different priorities and may not always understand the specific needs of journalists. However, by working together, journalists and IT departments can implement effective defenses against privilege escalation and protect sensitive information. Communication and collaboration are key to success in this area.

Checklist of basic defenses

Journalists can use the following checklist to ensure that they are implementing basic defenses against privilege escalation

  • Keep software up to date
  • Use strong passwords
  • Configure systems securely
  • Use least-privilege principles
  • Implement access controls
  • Use encryption

By following this checklist and working with their IT department, journalists can protect themselves and their sources from cyber threats and ensure that they are able to conduct their work safely and securely.