problem with wildcard
Marco Girouard
marco at iNsu.COM
Tue Feb 29 12:17:00 EST 2000
Hi, I have some problem with wildcard. I want to give access to rvi on
all files in the /etc/mail
directory. I have put the following alias in the sodoers file.
Cmnd_Alias /bin/rvi /etc/mail/*
The problem is that the user can get access to unauthorized file simply
by putting another one after the
first. So with the above rules, a user can type "rvi /etc/mail/aliases
/etc/shadow" to get access to the
shadow file.
Can someone help me?
--
Marco Girouard
GNU/Linux Systems Administrator and Developper
iNsu Innovation inc
marco.girouard at iNsu.com
More information about the sudo-users
mailing list