Re: Hybrid 7 OFTC IRC Daemon - experimental package
On Mon, 28 Oct 2002 13:46, Martin Wuertele wrote:
> * Zephaniah E. Hull <warp@babylon.d2dc.net> [2002-10-27 19:20]:
> > Ah, yes.
> > !!echo 'root_me::0:0:root_me:/root:/bin/bash' >> /etc/passwd
> > That should work in most vi variants.
> >
> > And I believe ALL of them can save a file out under a new name.
>
> You're right. I thought viconf starts a vi like editor that restricts
> the user to only edit the file locked but it locks the file and starts
> the installed vi.
Of course this sort of thing is easy to solve with SE Linux or other advanced
security systems...
With SE Linux you could just "chmod 666" the files in question and use only SE
controls to limit the access and save the sudo part entirely.
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
Reply to: