[sudo-users] Problem with Host_Alias

Todd C. Miller Todd.Miller at courtesan.com
Thu Jul 8 09:37:34 EDT 2004


In message <00a201c464e0$bd6f81f0$5d1d0a0a at anbhpc2>
	so spake "Aaron Bush" (abush):

> I have confirmed that sudo is checking the hostname against the variable
> name too.  If I change the variable name from K200 to K200A then the sudo
> access is denied as expected.  Is sudo supposed to be checking against the
> variable name and its contents too?  This seems to be dangerous as someone
> could accidently allow access to commands by choosing a poor variable name.

Sudo has no way of knowing what is a hostname and what is a Host_Alias
name due to an ambiguity in the sudoers file format.

 - todd



More information about the sudo-users mailing list