how to prevent ./*

Rahul shadhanker at gmx.net
Wed Nov 12 04:11:58 EST 2003


Hello Martin,

You can configure sudoers files with "!/usr/bin/XX
But make sure that the user(whose in the sudoers file) are using
$ sudo ./XX  [or]
$ sudo /usr/bin/XX

NOT just

$./XX or
$/usr/bin/XX

Hope this helps and let me how it works.

Thanks and Regards,
-sadha


> Can anyone tell me how to configure sudoers in order to prevent someone
from
> doing ./* ?
> I am trying to prevent someone from executing a command XX, so I
configured
>
> !/usr/bin/XX
>
> but still that user can go and do cd /usr/bin, ./XX.
>
> I cannot seem to put ! ./XX in sudoers, I get a syntax error.
>
> Can anyone tell how to do it?
>
> By the way, is it possible to include subdirectories when putting
wildcards?
> For instance, I would like !/usr/* to prevent from doing everything under
> /usr, including subdirectories. Any idea?
>
> Thanks a lot
>
> Martin
>
> _________________________________________________________________
> Protect your PC - get McAfee.com VirusScan Online
> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
>
> ____________________________________________________________
> sudo-users mailing list <sudo-users at sudo.ws>
> For list information, options, or to unsubscribe, visit:
> http://www.sudo.ws/mailman/listinfo/sudo-users
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.534 / Virus Database: 329 - Release Date: 10/31/2003



More information about the sudo-users mailing list