Re: [CentOS] Wheel and YUM!!

2008-06-27 Thread Eric DuToit

In a flurry of recycled electrons Plant, Dean wrote:


 All my
sudoers lines that call groups like he was trying to do always have a
!SU, !SHELLS to specifically deny root access.

Anyway I will shut up now as none of this will help fix his problem.


If you ever grant someone ALL commands and then try and restrict them from 
getting a root shell your fighting a loosing battle.  Vi/Vim as root can bang 
out to a root shell, more can bang out to a root shell, and what's to stop 
someone from writing a shell script and executing it as root?


You may already have this covered and I'm not directing this specifically at 
your post, but I've seen some really poorly written sudoers files that open up 
huge holes.


I know this isn't contributing either so I'm going to lunch!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Yogunluk

2008-06-27 Thread Eric DuToit

In a flurry of recycled electrons Ross S. W. Walker wrote:

Somebody needs to remove this guy from the list.

There is some dumb auto-reply rule either him or one of his sophomoric 
co-workers setup on his mail client.



Mailenable.  The four auto-replies to his auto-reply was great!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] mail_always fails in CentOS 5

2008-03-19 Thread Eric DuToit

I'm using the same sudoers file for all hosts.  Out of 35 hosts, 14 are CentOS 
5, the rest are CentOS 4.  There are mixtures of MTA's on both platforms but 
the behavior is consistent.  Here is the snip of my sudoers:

Defaults mail_always
Defaults mailto=[EMAIL PROTECTED]

Works fine in CentOS 4, doesn't even produce a blip in the maillog in CentOS 5 
on all servers.  Outbound mail tested and working on all boxes.

Does anyone else see this behavior?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos