[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Linux Virus



on Sat, Mar 31, 2001 at 08:45:25AM -0600, John Hasler (john@dhh.gt.org) wrote:
> Ethan Benson writes:
> > cat <<EOF >> ~/.bashrc
> > alias su='su -c ~/.virus'
> > EOF
> 
> su might benefit from a configuration file that sets the permissable path
> for -c.
> 
> Another possible fix might be for bash to somehow detect "gain-root"
> commands and refuse to alias them.

Nope.

sudo provides this functionality.  'su' allows you to become an
effective user.  To use 'su' to execute root commands, you require the
root password.  What, exactly, are you protecting against.

Better, IMO, to use sudo to invoke su, and restrict rights to do so to
specified users.

For restricted commands access, use the tool designed for this task,
sudo.

-- 
Karsten M. Self <kmself@ix.netcom.com>    http://kmself.home.netcom.com/
 What part of "Gestalt" don't you understand?       There is no K5 cabal
  http://gestalt-system.sourceforge.net/         http://www.kuro5hin.org

Attachment: pgpYybNXgFzg8.pgp
Description: PGP signature


Reply to: