Executing commands without sudo
decay at flash.net
Fri Aug 2 14:56:23 EDT 2002
> I was under the assumption that
> everything for "john" would be denied, unless he prefixed the command
> with sudo.
I think you may have the wrong idea about sudo. The user "john" can do any command that is allowed to him by standard UNIX rules. The *only* time sudo comes into play is when you want "john" to be able to issue a command as root. By your setup, "john" can issue two commands as root: /bin/mt & /bin/cpio When he says "sudo /bin/mt" it's the same as doing this: "su root -c '/bin/mt'" The only difference? User "john" doesn't need root's password when using sudo (since root is allowing him to
use those two commands), but he *would* need to know it if he used the "su " form of the command.
mailto:decay at flash.net
"Keep the wheels rolling." - Anonymous traffic prophet
More information about the sudo-users