Cmnd_Alias subdirectories

John E Hein jhein at timing.com
Wed Jan 9 18:12:44 EST 2002


Simon Perreault wrote at 16:41 -0500 on Jan  9:
 > Would that create obvious security holes?

a few things to consider...
You'd have to make sure you followed sym links in the implementation.
How about mount points?
etc.

What you propose is a kind of chroot.  And it's not hard
 for root to break out of a chroot.



More information about the sudo-workers mailing list