On Thu, Feb 15, 2024 at 10:34:32PM +0000, Thorsten Glaser wrote: > Russ Allbery dixit: > > >Thorsten Glaser <tg@mirbsd.de> writes: > > > >> Right… and why does pkexec check against /etc/shells? > > > >pkexec checks against /etc/shells because this is the traditional way to > >determine whether the user is in a restricted shell, and pkexec is > >essentially a type of sudo and should be unavailable to anyone who is > >using a restricted shell. > > Ah okay, makes sense…ish (sudo does not check this). It does if one configures it to by setting runas_check_shell to true. G'luck, Peter -- Peter Pentchev roam@ringlet.net roam@debian.org pp@storpool.com PGP key: http://people.FreeBSD.org/~roam/roam.key.asc Key fingerprint 2EE7 A7A5 17FC 124C F115 C354 651E EFB0 2527 DF13
Attachment:
signature.asc
Description: PGP signature