Re: shared root account

[scbarker@uiuc.edu (Steven Barker)]

On Sat, Jul 07, 2001 at 12:11:44AM -0600, Will Aoki wrote:
> On Sat, Jul 07, 2001 at 02:10:09AM +0100, Eric E Moore wrote:
> [cut]
> > I would be very shocked if you could compromise a system with a
> > sudoers entry of:
> > me hostname = (root) /bin/cat
> 
> Depends on what's on the system. I've thought of four similar ways.

Hmm, you forgot the obvious:

sudo cat /etc/shadow > foo

-- 
Steven Barker                                      scbarker@uiuc.edu
  It'll be just like Beggars' Canyon back home.
  		-- Luke Skywalker
PGP Key Fingerprint: 1A33 9F2E 368D 24B1 81D4  60BF E928 9E28 958F 2058