Re: If you care about debian's security read this

[Jaak Pruulmann <jjpp@meso.ee>]

Hi..

On 4 Mar 2002, Gustavo Noronha Silva wrote:

> kov     ALL = (root) NOPASSWD: /usr/sbin/chroot, /usr/sbin/pbuilder,
> PASSWD: /usr/bin/apt-get

> so, notice that sudo never asks the root password and with that sudoers
> line my user cannot run /bin/sh

Um, have You ever tried

sudo /usr/sbin/chroot / /bin/sh

?

jjpp.