On 02/10/2016 11:31 AM, Tom H wrote: > Your malefic JS will still need the user's password to run "sudo some_command". Not if you've set sudo up not to need a password.