the !

Kaysee Long kaysee at
Tue Feb 5 14:48:28 EST 2002

Hi I am compiling the newest version of sudo and a security doc (outside of
sudo) said this:

Commands sshould not be subtracted from ALL using "!" because the user
could copy the command to a different name or path and then run it.  If
this method is used it must be done with this exposure in mind.  For
user  ALL = ALL, !/usr/bin/vi

Does this hold true and how would I do it a different way?

example if I need the shells command change from :

Cmnd_Alias SHELLS=/usr/bin/ksh, /usr/bin/csh, /usr/bin/sh, /usr/bin/rsh, \
/bin/ksh, /bin/csh, /bin/sh, /bin/rsh

%kaysee       ALL=ALL,!SHELLS

More information about the sudo-users mailing list