[sudo-users] Problem with Host_Alias
Todd C. Miller
Todd.Miller at courtesan.com
Thu Jul 8 09:37:34 EDT 2004
In message <00a201c464e0$bd6f81f0$5d1d0a0a at anbhpc2>
so spake "Aaron Bush" (abush):
> I have confirmed that sudo is checking the hostname against the variable
> name too. If I change the variable name from K200 to K200A then the sudo
> access is denied as expected. Is sudo supposed to be checking against the
> variable name and its contents too? This seems to be dangerous as someone
> could accidently allow access to commands by choosing a poor variable name.
Sudo has no way of knowing what is a hostname and what is a Host_Alias
name due to an ambiguity in the sudoers file format.
- todd
More information about the sudo-users
mailing list