Berthold Cogel <[email protected]> wrote:
> We're doing somthing like this in /etc/sudoers:


> Cmnd_Alias      SHELLS =        /bin/sh, \
>                                /bin/bash, \
                                [...]

> TRUSTED_USR  ALL = NOPASSWD:    ALL ,!SHELLS, NOROOT

Surely this breaks trivially?

    ln -s /bin/bash /tmp/somethingelse
    sudo /tmp/somethingelse

Chris


-- 
To UNSUBSCRIBE, email to [email protected] 
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to