On Sun, Jun 23, 2019 at 12:07:12AM +0000, Andy Smith wrote: > Hello, > > On Sat, Jun 22, 2019 at 04:44:40PM -0700, Jimmy Johnson wrote: > > Some one mentioned mounting drives, all that and what they need can be > > configured. > > Also note that anyone who can use "mount" as root can trivially become > root. If countenancing allowing users to run "mount" as root I would > make scripts that only mounted the exact things to the exact places, > and then let them run those scripts as root.
Folks. Wise up. For "mount" there's a solution (in fstab) not needing root. For other things, sudoers covers nearly every restricted root usage. Cheers -- tomás
signature.asc
Description: Digital signature