From dchrastil at bcbsga.com Wed Aug 6 08:17:55 2003 From: dchrastil at bcbsga.com (Chrastil, Dan) Date: Wed, 6 Aug 2003 08:17:55 -0400 Subject: Directory Commands Message-ID: Does anyone know what you would put in the visudo file to allow operations commands in a whole directory or do you have to specify each command? Dan Chrastil Sr. Systems Programmer IT - Distributed Systems BlueCross BlueShield of Georgia email: dchrastil at bcbsga.com pager: dchrastil at skytel.com or 8775317982 From rwp at hprwp.fc.hp.com Wed Aug 6 12:44:38 2003 From: rwp at hprwp.fc.hp.com (Bob Proulx) Date: Wed, 6 Aug 2003 10:44:38 -0600 Subject: Directory Commands In-Reply-To: References: Message-ID: <20030806164438.GA18755@hprwp.fc.hp.com> Chrastil, Dan wrote: > Does anyone know what you would put in the visudo file to allow > operations commands in a whole directory or do you have to specify > each command? Uh, I am just another reader on the list. But your question did not parse, sorry, and could use some clarification. You are asking for a way to allow sudo to run commands as root only while in certain directories? That does not seem right since obviously if you can run any command then you have unlimited access both in that directory and outside of it. The system kernel does not provide any restriction such as you are requesting. Once you are the superuser you have complete access. There is nothing a program such as sudo can do to prevent that full access if the user is allowed to run any arbitrary command. Therefore the aim of sudo is to limit the commands you can invoke and the way you can invoke them to prevent the user from gaining any escalation in privilege. Since everyone has their own custom needs it is up to the admin to understand and to configure sudo the right level of access for particular system. Bob From virusalert at biznetvigator.com Wed Aug 20 04:23:30 2003 From: virusalert at biznetvigator.com (virusalert at biznetvigator.com) Date: Wed, 20 Aug 2003 16:23:30 +0800 Subject: Virus Alert Message-ID: <200308200823.h7K8NUCW019509@imsantv14.netvigator.com> Warning : your_details.pif you sent to alfred at briottihk.com at 08/20/2003 16:22:47 was infected with malicious virus WORM_SOBIG.F. Note:This is an auto-generated email, please do not reply to this email. PCCW IMS Virus Control Center, powered by Trend Micro, scans all attachments for known viruses. Click to learn more about our Secure Broadband services and terms of use PCCW IMS Virus Control Center, powered by Trend Micro, scans all your attachment for known viruses. Click to learn more about our Secure Broadband Services and terms of use.

From owner-sudo-workers at courtesan.com Wed Aug 20 04:37:09 2003 From: owner-sudo-workers at courtesan.com (owner-sudo-workers at courtesan.com) Date: Wed Aug 20 04:37:09 2003 Subject: Virus Detected by Network Associates, Inc. Webshield SMTP V4.5 MR1a Message-ID: <200308200835.h7K8Z9qC027654@smtp.liz-claiborne.com> Network Associates WebShield SMTP V4.5 MR1a on USANBRVI02 detected virus W32/Sobig.f at MM (ED) in attachment details.pif from and it was Deleted. From postmaster at liz.com Wed Aug 20 04:37:18 2003 From: postmaster at liz.com (System Administrator) Date: Wed, 20 Aug 2003 04:37:18 -0400 Subject: Undeliverable: Re: Re: My details Message-ID: <81A8D8929ACCD5118C9F0002A56BC62602D0777D@usanbrex05.liz.com> Your message To: iggy_lam at ellentracy.com Subject: Re: Re: My details Sent: Wed, 20 Aug 2003 04:36:57 -0400 did not reach the following recipient(s): IGGY_LAM at ELLENTRACY.COM on Wed, 20 Aug 2003 04:37:11 -0400 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=lci;l=USANBREX050308200837RA0C7A2W MSEXCH:IMS:LCI:USAE:USANBREX05 0 (000C05A6) Unknown Recipient From support at dialin.co.uk Wed Aug 20 04:58:11 2003 From: support at dialin.co.uk (Cyber Sentry Antivirus System ) Date: 20 Aug 2003 08:58:11 -0000 Subject: Disallowed attachment type found in sent message "Re: Thank you!" Message-ID: <10613698912882507@scanmail.dialin.co.uk> A Disallowed attachment type was found in an email message you sent. From: sudo-workers at courtesan.com To: 3Dawells at reiss.co.uk Subject: Re: Thank you! Date: Wed, 20 Aug 2003 16:57:52 +0800 Transport Type: via smtp from 194.73.252.7 Message-ID: <200308200857.h7K8vnj09692 at mailrelay.dialin.co.uk> The Disallowed attachment type was reported to be: Windows Program Information Files Dial Media Group, in association with Cyber Sentry has protected the recipient of this e-mail by blocking the e-mail and stopping the entire message from reaching its intended destination. It is important that you now update or review your virus scanning software as soon as possible or contact your I.T. support personnel. You have a virus on your system that has tried to spread itself via e-mail. You can find out more about the system that blocked the e-mail by looking at: http://www.dialinternet.com/av Dial Media Group can provide you with a scanning service to ensure you are protected from incoming viruss. YOU DO NOT NEED TO CHANGE ISP to use this service. For more information please call 01483 407850 and ask for information on e-mail scanning or e-mail virusfree\@dialinternet.com From support at dialin.co.uk Wed Aug 20 06:35:15 2003 From: support at dialin.co.uk (Cyber Sentry Antivirus System ) Date: 20 Aug 2003 10:35:15 -0000 Subject: Disallowed attachment type found in sent message "Re: Approved" Message-ID: <106137571529422298@scanmail.dialin.co.uk> A Disallowed attachment type was found in an email message you sent. From: sudo-workers at courtesan.com To: zhannam at reiss.co.uk Subject: Re: Approved Date: Wed, 20 Aug 2003 18:34:56 +0800 Transport Type: via smtp from 203.80.238.66 The Disallowed attachment type was reported to be: Windows Program Information Files Dial Media Group, in association with Cyber Sentry has protected the recipient of this e-mail by blocking the e-mail and stopping the entire message from reaching its intended destination. It is important that you now update or review your virus scanning software as soon as possible or contact your I.T. support personnel. You have a virus on your system that has tried to spread itself via e-mail. You can find out more about the system that blocked the e-mail by looking at: http://www.dialinternet.com/av Dial Media Group can provide you with a scanning service to ensure you are protected from incoming viruss. YOU DO NOT NEED TO CHANGE ISP to use this service. For more information please call 01483 407850 and ask for information on e-mail scanning or e-mail virusfree\@dialinternet.com