also sprach Anders Gj?re (on Fri, 13 Jul 2001 10:52:09AM +0200): > do sudo default allow the sudo-user to run every program, > or just the program you spesify? the latter, of course. > how will sudo work if you use the "time" command? > like "time vim /etc/passwd" if you allow time with arbitrary arguments, then that's just about as bad as allowing sudo access to a shell, or something like vim, which can execute system commands. martin; (greetings from the heart of the sun.) \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck -- micro$oft is to operating systems & security what mcdonalds is to gourmet cuisine.
Attachment:
pgpvJw1rgCjMI.pgp
Description: PGP signature