Re: VI wrapper for SUDO? - another bad way ??
hi ya bill
how about: ( maybe a dumb idea .... but...a temporary answer??
user> vi /etc/aliases
- save it to /tmp/aliases
user> sucpaliases
where sucp: and allow users to run sucp as root
- add sucpaliases into the sudo file
#!/bin/bash
#
# sucpaliases
#
PATH=/sbin:/bin:/usr/sbin
#
# do some error checking too before executing these commands
#
mv /etc/aliases /etc/aliases.prev.xx
mv /tmp/aliases /etc/aliases
newaliases
#
# end of sucp
c ya
alvin
On 29 Nov 2001, William R Ward wrote:
> William R Ward <bill@wards.net> writes:
> > Is there any kind of wrapper that can be used to allow sudo to grant
> > editing access to only one file? I am thinking of something similar
> > to vipw or visudo, but with security in mind; following this basic
> > algorithm:
> >
> > 1. Using user privileges, Copy the desired file to a temp file owned
> > by the real user.
> > 2. Using user privileges, Edit the temp file.
> > 3. Using root privileges, copy the temp file to the final location.
>
Reply to: