also sprach Anders Gj?re (on Fri, 13 Jul 2001 10:52:09AM +0200):
> do sudo default allow the sudo-user to run every program,
> or just the program you spesify?
the latter, of course.
> how will sudo work if you use the "time" command?
> like "time vim /etc/passwd"
if you allow time with arbitrary arguments, then that's just about as
bad as allowing sudo access to a shell, or something like vim, which
can execute system commands.
martin; (greetings from the heart of the sun.)
\____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck
--
micro$oft is to operating systems & security
what mcdonalds is to gourmet cuisine.
PGP signature
