Re: Sudo question

[Florian Weimer <fw@deneb.enyo.de>]

* Johann Spies:

> alias specification Cmnd_Alias BACKUP =
> /opt/tivoli/tsm/client/ba/bin/dsm, \
> /opt/tivoli/tsm/client/ba/bin/dsmadmc, \
> /opt/tivoli/tsm/client/ba/bin/dsmc, \
> /opt/tivoli/tsm/client/ba/bin/dsmagent,\
> /opt/tivoli/tsm/client/ba/bin/dsmcad,\
> /opt/tivoli/tsm/client/ba/bin/dsmj,\
> /opt/tivoli/tsm/client/ba/bin/dsmtca 
>
> # User privilege specification
> RUGSTEUN  ALL= (root) BACKUP
> ============================

IIRC, the TSM command line clients suffer from several buffer
overflows, so this is roughly equivalent to giving away full root
access.