problem with wildcard

Marco Girouard marco at iNsu.COM
Tue Feb 29 12:17:00 EST 2000


Hi, I have some problem with wildcard.  I want to give access to rvi on
all files in the /etc/mail 
directory.  I have put the following alias in the sodoers file.
Cmnd_Alias /bin/rvi /etc/mail/*

The problem is that the user can get access to unauthorized file simply
by putting another one after the 
first. So with the above rules, a user can type "rvi /etc/mail/aliases
/etc/shadow" to get access to the 
shadow file.

Can someone help me?
-- 
Marco Girouard
GNU/Linux Systems Administrator and Developper
iNsu Innovation inc
marco.girouard at iNsu.com



More information about the sudo-users mailing list