Re: sudo and command line expansion

From: Felix Havemann (blackandwhite.nospam@felixthecat.de)
Date: 12/19/02

  • Next message: all mail refused: "Re: sudo and command line expansion" 
    From: Felix Havemann <blackandwhite.nospam@felixthecat.de>
Date: Wed, 18 Dec 2002 23:02:01 +0000 (UTC)

    all mail refused <elvis@notatla.demon.co.uk> wrote:
    >>want a person to be root. Don't give sudo access to something that can make
    >>shells calls outside of itself as well (i.e. :!<command> in vi). Etc.
    Even less can call an editor... mostly "vi". So do not let sudoers use less
    either.

    Greetings
    Felix 

    -- 
eMail address given is correct. Removal of nospam ends up in a spam logging
account. Feel free to contact me.

    Relevant Pages

    • Re: Why Disable Root ssh login?
      ... If it is configured to allow someone full root access with just their ... If the hacker finds that account. ... Even so the sudo access I give myself is extremely ...
      (Debian-User)
    • Re: Why Disable Root ssh login?
      ... If it is configured to allow someone full root access with just their ... If the hacker finds that account. ... Even so the sudo access I give myself is extremely ...
      (Debian-User)
    • Re: hardening a linux server against local exploits
      ... > require root. ... >> sudo access where I can... ... > I've used LIDS quite successfully (terrific support from the support ... but if they demand root, you'll probably be inundated with demands ...
      (comp.os.linux.security)
    • Re: hardening a linux server against local exploits
      ... > filesystem that holds the OS files, ... agree that the only way to really clean it up is a fresh install. ... I've read that the SuckIt root kit infects random binaries. ... sudo access where I can... ...
      (comp.os.linux.security)
    • Re: su and X question
      ... I have set up sudo so ... those as your editor while root. ... What other editor would you have suggested? ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)