[nmglug] sudo

Sam Noble sam.noble at comcast.net
Mon Jun 13 08:21:20 PDT 2005


On Sun, 2005-06-12 at 21:53 -0600, pi wrote:
> a_kaluta wrote:
> > Dear club members;
> > Attempting to add to the sudoers list,
> > looking at "man sudoers", attempting to assemble those examples,has been 
> > a no go.
> > I wish to add "Red" with root access to "visudo".
> > Are there any club members inclined to reveal their knowledge of that 
> > arcane syntax?
> >                                          Signed: a Friend of Reds'.
> > #Host alias specifications
> > #User alias specifications
> > #Cmnd alias specifications
> > #User alias specifications
> > root    ALL=(ALL) ALL
> 
> red ALL=/usr/sbin/visudo
> 
> However, this is effectively root access, since vi will let the user 
> escape to the shell by  :!sh

Additionally, user red could easily add sudo entries for anything he
wants to do including:

red     ALL=NOPASSWD: ALL

:)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.nmglug.org/pipermail/nmglug-nmglug.org/attachments/20050613/70032f6e/attachment.pgp>


More information about the nmglug mailing list