OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: How secure is sudo?
From: Riley Hassell (rileySPEAKEASY.NET)
Date: Wed Aug 16 2000 - 23:10:24 CDT

 Regardless,

You can also start a shell from vi.
In this case a root shell ;)

John Madden wrote:

> > Another general question regarding sudo- what is the best
> > way to allow users to edit other people's files- 'sudo vi',
> > for example? I find this to pose a problem because
> > couldn't the user 'sudo vi /etc/sudoers'? I'm assuming
> > there is an easy way to prevent this, but am too lazy to
> > hunt down how it is done.
>
> Well, probably the easiest way would be to put the user into the right
> group, and make the right file group-writable...
>
> John
>
> --
> # John Madden weezavenir.dhs.org ICQ: 2EB9EA
> # Sys-Admin / Webmaster, Avenir Web: http://avenir.dhs.org
> # UNIX Systems Engineer, Ivy Tech State College
> # FreeLists, free mailing lists for all: http://freelists.dhs.org
> # Linux, Apache, Perl and C: All the best things in life are free! 

--

  Riley Hassell
  Network Security
  Speakeasy Networks