Re: sudo and growisofs

2006-07-11 Thread Fabien Wernli
Hi, On Tue, Jul 11, 2006 at 12:03:09PM +0200, Andy Polyakov wrote: [...] > sudo growisofs ... /etc/shadow > env MKISOFS=/tmp/evil.script sudo growisofs ... > > is enough reason for vast majority of users. A. How about I create a non superuser "burn" that is allowed to burn through permissions on

Re: sudo and growisofs

2006-07-11 Thread Andy Polyakov
sudo growisofs ... /etc/shadow env MKISOFS=/tmp/evil.script sudo growisofs ... is enough reason for vast majority of users. A. How about I create a non superuser "burn" that is allowed to burn through permissions on the block device and then use: Well, who makes sure that input data readable