Hello. Sometimes, on linux machines, i read report of linpeas.sh and see RED/YELLOW attack vector like “group 6(disk)”. What the point? What can i do with this group membership?
The group disk can be very dangerous, since hard drives in /dev/sd* and /dev/hd* can be read and written bypassing any file system and any partition, allowing a normal user to disclose, alter and destroy both the partitions and the data of such drives without root privileges. Users should never belong to this group.