[RCLOCAL-001] Replaces /etc/rc.local from remote URL without integrity check
replace_rc_local.sh : 24-34
curl -o /etc/rc.local from raw.githubusercontent.com with no hash validation.
Impact: MITM executes arbitrary commands at boot as root.
| ID | Severity | Category | File | Lines | Finding |
|---|---|---|---|---|---|
| RCLOCAL-001 | High | Security | replace_rc_local.sh |
24-34 | Replaces /etc/rc.local from remote URL without integrity check |
curl -o /etc/rc.local from raw.githubusercontent.com with no hash validation.